# Flog Txt Version 1
# Analyzer Version: 3.2.2
# Analyzer Build Date: Mar  3 2020 14:14:30
# Log Creation Date: 01.04.2020 22:32:10.037

Process:
	id = "1"
	image_name = "compito italiano.doc.exe"
	filename = "c:\\users\\fd1hvy\\desktop\\compito italiano.doc.exe"
	page_root = "0x11eca000"
	os_pid = "0x11b4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x560"
	cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe\" "
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0x11c4

	[0095.683] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0096.289] RoInitialize () returned 0x1
	[0096.289] RoUninitialize () returned 0x0
	[0100.952] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe910 | out: phkResult=0xafe910*=0x0) returned 0x2
	[0100.952] RegCloseKey (hKey=0x80000002) returned 0x0
	[0101.009] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x104, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77
	[0101.040] IsAppThemed () returned 0x1
	[0101.045] CoTaskMemAlloc (cb=0xf0) returned 0xd99d38
	[0101.045] CreateActCtxA (pActCtx=0xaff0b8) returned 0xd99f2c
	[0101.220] CoTaskMemFree (pv=0xd99d38) 
	[0101.357] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc151
	[0101.357] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc19b
	[0101.378] GetUserNameW (in: lpBuffer=0xafeec8, pcbBuffer=0xaff140 | out: lpBuffer="FD1HVy", pcbBuffer=0xaff140) returned 1
	[0101.383] GetComputerNameW (in: lpBuffer=0xafeec8, nSize=0xaff140 | out: lpBuffer="NQDPDE", nSize=0xaff140) returned 1
	[0101.933] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe.config", nBufferLength=0x105, lpBuffer=0xafe260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe.config", lpFilePart=0x0) returned 0x37
	[0102.332] GetCurrentProcess () returned 0xffffffff
	[0102.332] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe5c8 | out: TokenHandle=0xafe5c8*=0x2cc) returned 1
	[0102.338] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0102.338] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e
	[0102.342] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0xafe5c0 | out: lpFileInformation=0xafe5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0102.344] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44
	[0102.344] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x44, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43
	[0102.345] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0xafe5c8 | out: lpFileInformation=0xafe5c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0102.347] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44
	[0102.347] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x44, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43
	[0102.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe500) returned 1
	[0102.349] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0102.349] GetFileType (hFile=0x2d0) returned 0x1
	[0102.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe4fc) returned 1
	[0102.349] GetFileType (hFile=0x2d0) returned 0x1
	[0102.394] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe54c | out: phkResult=0xafe54c*=0x0) returned 0x2
	[0102.394] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe54c | out: phkResult=0xafe54c*=0x0) returned 0x2
	[0102.396] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe5bc | out: lpFileSizeHigh=0xafe5bc*=0x0) returned 0x8c8f
	[0102.397] ReadFile (in: hFile=0x2d0, lpBuffer=0x28da0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe578, lpOverlapped=0x0 | out: lpBuffer=0x28da0c8*, lpNumberOfBytesRead=0xafe578*=0x1000, lpOverlapped=0x0) returned 1
	[0102.419] ReadFile (in: hFile=0x2d0, lpBuffer=0x28da0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe424, lpOverlapped=0x0 | out: lpBuffer=0x28da0c8*, lpNumberOfBytesRead=0xafe424*=0x1000, lpOverlapped=0x0) returned 1
	[0102.422] ReadFile (in: hFile=0x2d0, lpBuffer=0x28da0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe2d8, lpOverlapped=0x0 | out: lpBuffer=0x28da0c8*, lpNumberOfBytesRead=0xafe2d8*=0x1000, lpOverlapped=0x0) returned 1
	[0102.423] ReadFile (in: hFile=0x2d0, lpBuffer=0x28da0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe2d8, lpOverlapped=0x0 | out: lpBuffer=0x28da0c8*, lpNumberOfBytesRead=0xafe2d8*=0x1000, lpOverlapped=0x0) returned 1
	[0102.424] ReadFile (in: hFile=0x2d0, lpBuffer=0x28da0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe2d8, lpOverlapped=0x0 | out: lpBuffer=0x28da0c8*, lpNumberOfBytesRead=0xafe2d8*=0x1000, lpOverlapped=0x0) returned 1
	[0102.424] ReadFile (in: hFile=0x2d0, lpBuffer=0x28da0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe210, lpOverlapped=0x0 | out: lpBuffer=0x28da0c8*, lpNumberOfBytesRead=0xafe210*=0x1000, lpOverlapped=0x0) returned 1
	[0102.430] ReadFile (in: hFile=0x2d0, lpBuffer=0x28da0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe394, lpOverlapped=0x0 | out: lpBuffer=0x28da0c8*, lpNumberOfBytesRead=0xafe394*=0x1000, lpOverlapped=0x0) returned 1
	[0102.432] ReadFile (in: hFile=0x2d0, lpBuffer=0x28da0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe2a0, lpOverlapped=0x0 | out: lpBuffer=0x28da0c8*, lpNumberOfBytesRead=0xafe2a0*=0x1000, lpOverlapped=0x0) returned 1
	[0102.432] ReadFile (in: hFile=0x2d0, lpBuffer=0x28da0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe2a0, lpOverlapped=0x0 | out: lpBuffer=0x28da0c8*, lpNumberOfBytesRead=0xafe2a0*=0xc8f, lpOverlapped=0x0) returned 1
	[0102.432] ReadFile (in: hFile=0x2d0, lpBuffer=0x28da0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe364, lpOverlapped=0x0 | out: lpBuffer=0x28da0c8*, lpNumberOfBytesRead=0xafe364*=0x0, lpOverlapped=0x0) returned 1
	[0102.433] CloseHandle (hObject=0x2d0) returned 1
	[0102.435] GetCurrentProcess () returned 0xffffffff
	[0102.435] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe710 | out: TokenHandle=0xafe710*=0x2d0) returned 1
	[0102.436] GetCurrentProcess () returned 0xffffffff
	[0102.436] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe710 | out: TokenHandle=0xafe710*=0x2d4) returned 1
	[0102.436] GetCurrentProcess () returned 0xffffffff
	[0102.436] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe5c8 | out: TokenHandle=0xafe5c8*=0x2d8) returned 1
	[0102.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\compito italiano.doc.exe.config"), fInfoLevelId=0x0, lpFileInformation=0xafe5c0 | out: lpFileInformation=0xafe5c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0102.437] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38
	[0102.437] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe.config", nBufferLength=0x38, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe.config", lpFilePart=0x0) returned 0x37
	[0102.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\compito italiano.doc.exe.config"), fInfoLevelId=0x0, lpFileInformation=0xafe5c8 | out: lpFileInformation=0xafe5c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0102.437] GetCurrentProcess () returned 0xffffffff
	[0102.438] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe710 | out: TokenHandle=0xafe710*=0x2dc) returned 1
	[0102.438] GetCurrentProcess () returned 0xffffffff
	[0102.438] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe710 | out: TokenHandle=0xafe710*=0x2e0) returned 1
	[0102.560] GetCurrentProcess () returned 0xffffffff
	[0102.560] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe570 | out: TokenHandle=0xafe570*=0x2e4) returned 1
	[0102.567] GetCurrentProcess () returned 0xffffffff
	[0102.567] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe580 | out: TokenHandle=0xafe580*=0x2e8) returned 1
	[0102.575] GetCurrentProcess () returned 0xffffffff
	[0102.575] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafecb0 | out: TokenHandle=0xafecb0*=0x2ec) returned 1
	[0102.576] GetCurrentProcess () returned 0xffffffff
	[0102.576] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafecc0 | out: TokenHandle=0xafecc0*=0x2f0) returned 1
	[0102.780] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0
	[0102.782] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x6fd40000
	[0103.783] AdjustWindowRectEx (in: lpRect=0xaff0e0, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50081 | out: lpRect=0xaff0e0) returned 1
	[0103.786] GetCurrentProcess () returned 0xffffffff
	[0103.787] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0xafeff4, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0xafeff4*=0x2f8) returned 1
	[0103.804] GetCurrentActCtx (in: lphActCtx=0xafef54 | out: lphActCtx=0xafef54*=0x0) returned 1
	[0103.804] ActivateActCtx (in: hActCtx=0xd99f2c, lpCookie=0xafef64 | out: hActCtx=0xd99f2c, lpCookie=0xafef64) returned 1
	[0103.804] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0
	[0103.806] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x6fb30000
	[0104.861] GetModuleHandleW (lpModuleName="user32.dll") returned 0x750c0000
	[0104.861] GetProcAddress (hModule=0x750c0000, lpProcName="DefWindowProcW") returned 0x743c0140
	[0104.862] GetStockObject (i=5) returned 0x900015
	[0104.865] GetModuleHandleW (lpModuleName=0x0) returned 0x710000
	[0104.867] CoTaskMemAlloc (cb=0x5a) returned 0xd97138
	[0104.867] RegisterClassW (lpWndClass=0xafee08) returned 0xc19a
	[0104.868] CoTaskMemFree (pv=0xd97138) 
	[0104.868] GetModuleHandleW (lpModuleName=0x0) returned 0x710000
	[0104.869] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x710000, lpParam=0x0) returned 0x8005c
	[0104.870] SetWindowLongW (hWnd=0x8005c, nIndex=-4, dwNewLong=1950089536) returned 81790438
	[0104.871] GetWindowLongW (hWnd=0x8005c, nIndex=-4) returned 1950089536
	[0104.872] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe628 | out: phkResult=0xafe628*=0x310) returned 0x0
	[0104.873] RegQueryValueExW (in: hKey=0x310, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0xafe648, lpData=0x0, lpcbData=0xafe644*=0x0 | out: lpType=0xafe648*=0x0, lpData=0x0, lpcbData=0xafe644*=0x0) returned 0x2
	[0104.873] RegQueryValueExW (in: hKey=0x310, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0xafe648, lpData=0x0, lpcbData=0xafe644*=0x0 | out: lpType=0xafe648*=0x0, lpData=0x0, lpcbData=0xafe644*=0x0) returned 0x2
	[0104.873] RegCloseKey (hKey=0x310) returned 0x0
	[0104.874] SetWindowLongW (hWnd=0x8005c, nIndex=-4, dwNewLong=81790478) returned 1950089536
	[0104.875] GetWindowLongW (hWnd=0x8005c, nIndex=-4) returned 81790478
	[0104.875] GetWindowLongW (hWnd=0x8005c, nIndex=-16) returned 113311744
	[0104.876] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc19d
	[0104.877] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc19e
	[0104.877] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x8005c, Msg=0x81, wParam=0x0, lParam=0xafe978) returned 0x1
	[0104.878] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x8005c, Msg=0x83, wParam=0x0, lParam=0xafe964) returned 0x0
	[0105.160] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x8005c, Msg=0x1, wParam=0x0, lParam=0xafe978) returned 0x0
	[0105.160] GetClientRect (in: hWnd=0x8005c, lpRect=0xafe660 | out: lpRect=0xafe660) returned 1
	[0105.160] GetWindowRect (in: hWnd=0x8005c, lpRect=0xafe660 | out: lpRect=0xafe660) returned 1
	[0105.163] GetParent (hWnd=0x8005c) returned 0x0
	[0105.163] DeactivateActCtx (dwFlags=0x0, ulCookie=0x13c30001) returned 1
	[0105.215] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
	[0105.215] AdjustWindowRectEx (in: lpRect=0xaff0ac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0xaff0ac) returned 1
	[0105.215] GetSystemMetrics (nIndex=59) returned 1460
	[0105.215] GetSystemMetrics (nIndex=60) returned 920
	[0105.215] GetSystemMetrics (nIndex=34) returned 136
	[0105.216] GetSystemMetrics (nIndex=35) returned 39
	[0105.216] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
	[0105.217] AdjustWindowRectEx (in: lpRect=0xafefac, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0xafefac) returned 1
	[0105.222] CreateCompatibleDC (hdc=0x0) returned 0x6a010545
	[0105.250] GetSystemDefaultLCID () returned 0x409
	[0105.251] GetStockObject (i=17) returned 0xa01c1
	[0105.253] GetObjectW (in: h=0xa01c1, c=92, pv=0xafedfc | out: pv=0xafedfc) returned 92
	[0105.255] GetDC (hWnd=0x0) returned 0x10105d6
	[0105.325] GdiplusStartup (in: token=0xc65f00, input=0xafe3b0, output=0xafe400 | out: token=0xc65f00, output=0xafe400) returned 0x0
	[0105.337] CoTaskMemAlloc (cb=0x5c) returned 0xd97208
	[0105.339] GdipCreateFontFromLogfontW (hdc=0x10105d6, logfont=0xd97208, font=0xafeec4) returned 0x0
	[0105.752] CoTaskMemFree (pv=0xd97208) 
	[0105.813] CoTaskMemAlloc (cb=0x5c) returned 0xd96f30
	[0105.813] CoTaskMemFree (pv=0xd96f30) 
	[0105.814] CoTaskMemAlloc (cb=0x5c) returned 0xd97478
	[0105.814] CoTaskMemFree (pv=0xd97478) 
	[0105.814] GdipGetFontUnit (font=0x4df1f08, unit=0xafee8c) returned 0x0
	[0105.814] GdipGetFontSize (font=0x4df1f08, size=0xafee90) returned 0x0
	[0105.814] GdipGetFontStyle (font=0x4df1f08, style=0xafee88) returned 0x0
	[0105.815] GdipGetFamily (font=0x4df1f08, family=0xafee84) returned 0x0
	[0105.815] GdipGetFontSize (font=0x4df1f08, size=0x28f6fc0) returned 0x0
	[0105.815] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1
	[0105.816] GetDC (hWnd=0x0) returned 0xf0105ee
	[0105.816] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0xafeea0) returned 0x0
	[0105.824] GdipGetDpiY (graphics=0x61ef260, dpi=0x28f709c) returned 0x0
	[0105.824] GdipGetFontHeight (font=0x4df1f08, graphics=0x61ef260, height=0xafee98) returned 0x0
	[0105.825] GdipGetEmHeight (family=0x4df8578, style=0, EmHeight=0xafeea0) returned 0x0
	[0105.825] GdipGetLineSpacing (family=0x4df8578, style=0, LineSpacing=0xafeea0) returned 0x0
	[0105.825] GdipDeleteGraphics (graphics=0x61ef260) returned 0x0
	[0105.825] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
	[0105.826] GdipCreateFont (fontFamily=0x4df8578, emSize=0x41040000, style=0, unit=0x3, font=0x28f70b8) returned 0x0
	[0105.826] GdipGetFontSize (font=0x4dfef48, size=0x28f70bc) returned 0x0
	[0105.826] GdipDeleteFont (font=0x4df1f08) returned 0x0
	[0105.826] GetDC (hWnd=0x0) returned 0xf0105ee
	[0105.826] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0xafeed4) returned 0x0
	[0105.827] CoTaskMemAlloc (cb=0x5c) returned 0xd96f98
	[0105.879] GdipGetLogFontW (font=0x4dfef48, graphics=0x61ef260, logfontW=0xd96f98) returned 0x0
	[0105.882] CoTaskMemFree (pv=0xd96f98) 
	[0105.882] CoTaskMemAlloc (cb=0x5c) returned 0xd97410
	[0105.882] CoTaskMemFree (pv=0xd97410) 
	[0105.882] CoTaskMemAlloc (cb=0x5c) returned 0xd96f30
	[0105.882] CoTaskMemFree (pv=0xd96f30) 
	[0105.883] GdipDeleteGraphics (graphics=0x61ef260) returned 0x0
	[0105.883] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
	[0105.883] CoTaskMemAlloc (cb=0x5c) returned 0xd974e0
	[0105.883] CreateFontIndirectW (lplf=0xd974e0) returned 0x450a07a2
	[0105.883] CoTaskMemFree (pv=0xd974e0) 
	[0105.883] SelectObject (hdc=0x6a010545, h=0x450a07a2) returned 0x8a01c2
	[0105.883] GetTextMetricsW (in: hdc=0x6a010545, lptm=0xafefe0 | out: lptm=0xafefe0) returned 1
	[0105.884] GetTextExtentPoint32W (in: hdc=0x6a010545, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x28f72e4 | out: psizl=0x28f72e4) returned 1
	[0105.887] SelectObject (hdc=0x6a010545, h=0x8a01c2) returned 0x450a07a2
	[0105.890] DeleteDC (hdc=0x6a010545) returned 1
	[0105.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
	[0105.891] AdjustWindowRectEx (in: lpRect=0xafed28, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xafed28) returned 1
	[0105.891] AdjustWindowRectEx (in: lpRect=0xafef6c, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0xafef6c) returned 1
	[0105.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000
	[0105.892] AdjustWindowRectEx (in: lpRect=0xafeca0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xafeca0) returned 1
	[0105.892] AdjustWindowRectEx (in: lpRect=0xafeda4, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0xafeda4) returned 1
	[0105.892] GetSystemMetrics (nIndex=34) returned 136
	[0105.892] GetSystemMetrics (nIndex=35) returned 39
	[0105.892] GetCurrentActCtx (in: lphActCtx=0xaff12c | out: lphActCtx=0xaff12c*=0x0) returned 1
	[0105.892] ActivateActCtx (in: hActCtx=0xd99f2c, lpCookie=0xaff13c | out: hActCtx=0xd99f2c, lpCookie=0xaff13c) returned 1
	[0105.893] GetCurrentActCtx (in: lphActCtx=0xafef4c | out: lphActCtx=0xafef4c*=0xd99f2c) returned 1
	[0105.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fb30000
	[0105.894] AdjustWindowRectEx (in: lpRect=0xafee8c, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xafee8c) returned 1
	[0105.894] GetModuleHandleW (lpModuleName=0x0) returned 0x710000
	[0105.894] CreateWindowExW (dwExStyle=0x50080, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Form1", dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=136, nHeight=39, hWndParent=0x0, hMenu=0x0, hInstance=0x710000, lpParam=0x0) returned 0x20202
	[0105.894] SetWindowLongW (hWnd=0x20202, nIndex=-4, dwNewLong=1950089536) returned 81790438
	[0105.894] GetWindowLongW (hWnd=0x20202, nIndex=-4) returned 1950089536
	[0105.895] SetWindowLongW (hWnd=0x20202, nIndex=-4, dwNewLong=81790518) returned 1950089536
	[0105.895] GetWindowLongW (hWnd=0x20202, nIndex=-4) returned 81790518
	[0105.895] GetWindowLongW (hWnd=0x20202, nIndex=-16) returned 114229248
	[0105.895] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x81, wParam=0x0, lParam=0xafe970) returned 0x1
	[0105.899] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x83, wParam=0x0, lParam=0xafe95c) returned 0x0
	[0105.900] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x1, wParam=0x0, lParam=0xafe970) returned 0x0
	[0105.900] GetClientRect (in: hWnd=0x20202, lpRect=0xafe628 | out: lpRect=0xafe628) returned 1
	[0105.900] GetWindowRect (in: hWnd=0x20202, lpRect=0xafe628 | out: lpRect=0xafe628) returned 1
	[0105.901] SetWindowTextW (hWnd=0x20202, lpString="Form1") returned 1
	[0105.901] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xc, wParam=0x0, lParam=0x28f6810) returned 0x1
	[0105.912] GetUserObjectInformationA (in: hObj=0x13c, nIndex=1, pvInfo=0x28f7800, nLength=0xc, lpnLengthNeeded=0xafe520 | out: pvInfo=0x28f7800, lpnLengthNeeded=0xafe520) returned 1
	[0105.916] SetConsoleCtrlHandler (HandlerRoutine=0x4e0065e, Add=1) returned 1
	[0105.917] GetModuleHandleW (lpModuleName=0x0) returned 0x710000
	[0105.918] GetModuleHandleW (lpModuleName=0x0) returned 0x710000
	[0105.920] GetClassInfoW (in: hInstance=0x710000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x28f7864 | out: lpWndClass=0x28f7864) returned 0
	[0105.922] CoTaskMemAlloc (cb=0x58) returned 0xd98c08
	[0105.922] RegisterClassW (lpWndClass=0xafe470) returned 0xc1a0
	[0105.923] CoTaskMemFree (pv=0xd98c08) 
	[0105.924] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x710000, lpParam=0x0) returned 0x7002e
	[0105.926] NtdllDefWindowProc_W (hWnd=0x7002e, Msg=0x83, wParam=0x0, lParam=0xafdf9c) returned 0x0
	[0105.926] NtdllDefWindowProc_W (hWnd=0x7002e, Msg=0x1, wParam=0x0, lParam=0xafdfb0) returned 0x0
	[0105.927] NtdllDefWindowProc_W (hWnd=0x7002e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0105.927] NtdllDefWindowProc_W (hWnd=0x7002e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0105.933] GetStartupInfoW (in: lpStartupInfo=0x28f7c9c | out: lpStartupInfo=0x28f7c9c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) 
	[0105.936] GetParent (hWnd=0x20202) returned 0x0
	[0105.936] SetWindowLongW (hWnd=0x20202, nIndex=-8, dwNewLong=0) returned 0
	[0105.943] GetSystemMetrics (nIndex=11) returned 32
	[0105.943] GetSystemMetrics (nIndex=12) returned 32
	[0105.943] GetDC (hWnd=0x0) returned 0xf0105ee
	[0105.944] GetDeviceCaps (hdc=0xf0105ee, index=12) returned 32
	[0105.944] GetDeviceCaps (hdc=0xf0105ee, index=14) returned 1
	[0105.944] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1
	[0105.945] CreateIconFromResourceEx (presbits=0x28fa6fc, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x902ab
	[0105.946] GetSystemMetrics (nIndex=49) returned 16
	[0105.946] GetSystemMetrics (nIndex=50) returned 16
	[0105.947] CreateIconFromResourceEx (presbits=0x28fb7e0, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xa01f1
	[0105.948] SendMessageW (hWnd=0x20202, Msg=0x80, wParam=0x0, lParam=0xa01f1) returned 0x0
	[0105.948] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x80, wParam=0x0, lParam=0xa01f1) returned 0x0
	[0105.949] SendMessageW (hWnd=0x20202, Msg=0x80, wParam=0x1, lParam=0x902ab) returned 0x0
	[0105.950] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x80, wParam=0x1, lParam=0x902ab) returned 0x0
	[0105.950] GetSystemMenu (hWnd=0x20202, bRevert=0) returned 0x7009f
	[0105.956] GetWindowPlacement (in: hWnd=0x20202, lpwndpl=0xafef5c | out: lpwndpl=0xafef5c) returned 1
	[0105.956] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf020, uEnable=0x0) returned 0
	[0105.956] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf030, uEnable=0x0) returned 0
	[0105.956] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf060, uEnable=0x0) returned 0
	[0105.956] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf120, uEnable=0x1) returned 0
	[0105.957] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf000, uEnable=0x0) returned 0
	[0105.957] GetClientRect (in: hWnd=0x20202, lpRect=0xafefa0 | out: lpRect=0xafefa0) returned 1
	[0105.957] GetClientRect (in: hWnd=0x20202, lpRect=0xafef00 | out: lpRect=0xafef00) returned 1
	[0105.957] GetWindowRect (in: hWnd=0x20202, lpRect=0xafef00 | out: lpRect=0xafef00) returned 1
	[0105.957] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fb30000
	[0105.958] GetWindowLongW (hWnd=0x20202, nIndex=-16) returned 114229248
	[0105.958] GetWindowTextLengthW (hWnd=0x20202) returned 5
	[0105.958] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0105.958] GetSystemMetrics (nIndex=42) returned 0
	[0105.959] GetWindowTextW (in: hWnd=0x20202, lpString=0xafee84, nMaxCount=6 | out: lpString="Form1") returned 5
	[0105.959] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xd, wParam=0x6, lParam=0xafee84) returned 0x5
	[0105.959] GetWindowTextLengthW (hWnd=0x20202) returned 5
	[0105.959] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0105.959] GetSystemMetrics (nIndex=42) returned 0
	[0105.959] GetWindowTextW (in: hWnd=0x20202, lpString=0xafee84, nMaxCount=6 | out: lpString="Form1") returned 5
	[0105.959] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xd, wParam=0x6, lParam=0xafee84) returned 0x5
	[0105.959] GetWindowLongW (hWnd=0x20202, nIndex=-16) returned 114229248
	[0105.959] GetWindowLongW (hWnd=0x20202, nIndex=-20) returned 328064
	[0105.959] SetWindowLongW (hWnd=0x20202, nIndex=-16, dwNewLong=47120384) returned 114229248
	[0105.959] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x7c, wParam=0xfffffff0, lParam=0xafeefc) returned 0x0
	[0105.960] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x7d, wParam=0xfffffff0, lParam=0xafeefc) returned 0x0
	[0105.963] SetWindowLongW (hWnd=0x20202, nIndex=-20, dwNewLong=327808) returned 328064
	[0105.963] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x7c, wParam=0xffffffec, lParam=0xafeefc) returned 0x0
	[0105.963] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x7d, wParam=0xffffffec, lParam=0xafeefc) returned 0x0
	[0105.964] SetWindowPos (hWnd=0x20202, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
	[0105.964] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x46, wParam=0x0, lParam=0xafef14) returned 0x0
	[0105.964] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x83, wParam=0x1, lParam=0xafeeec) returned 0x0
	[0105.966] GetWindowPlacement (in: hWnd=0x20202, lpwndpl=0xafec40 | out: lpwndpl=0xafec40) returned 1
	[0105.966] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x47, wParam=0x0, lParam=0xafef14) returned 0x0
	[0105.966] GetClientRect (in: hWnd=0x20202, lpRect=0xafebf0 | out: lpRect=0xafebf0) returned 1
	[0105.966] GetWindowRect (in: hWnd=0x20202, lpRect=0xafebf0 | out: lpRect=0xafebf0) returned 1
	[0105.968] RedrawWindow (hWnd=0x20202, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
	[0105.968] GetSystemMenu (hWnd=0x20202, bRevert=0) returned 0x7009f
	[0105.968] GetWindowPlacement (in: hWnd=0x20202, lpwndpl=0xafef4c | out: lpwndpl=0xafef4c) returned 1
	[0105.968] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf020, uEnable=0x0) returned 0
	[0105.968] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf030, uEnable=0x0) returned 0
	[0105.968] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf060, uEnable=0x0) returned 0
	[0105.968] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf120, uEnable=0x1) returned 1
	[0105.968] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf000, uEnable=0x0) returned 0
	[0105.968] ShowWindow (hWnd=0x20202, nCmdShow=5) returned 0
	[0105.968] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0105.969] GetWindowTextLengthW (hWnd=0x20202) returned 5
	[0105.969] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0105.969] GetSystemMetrics (nIndex=42) returned 0
	[0105.969] GetWindowTextW (in: hWnd=0x20202, lpString=0xafeb48, nMaxCount=6 | out: lpString="Form1") returned 5
	[0105.969] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xd, wParam=0x6, lParam=0xafeb48) returned 0x5
	[0105.982] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fb30000
	[0105.982] GetWindowLongW (hWnd=0x20202, nIndex=-16) returned 114229248
	[0105.982] GetWindowTextLengthW (hWnd=0x20202) returned 5
	[0105.982] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0105.982] GetSystemMetrics (nIndex=42) returned 0
	[0105.982] GetWindowTextW (in: hWnd=0x20202, lpString=0xafea28, nMaxCount=6 | out: lpString="Form1") returned 5
	[0105.982] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xd, wParam=0x6, lParam=0xafea28) returned 0x5
	[0105.982] GetWindowTextLengthW (hWnd=0x20202) returned 5
	[0105.983] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0105.983] GetSystemMetrics (nIndex=42) returned 0
	[0105.983] GetWindowTextW (in: hWnd=0x20202, lpString=0xafea28, nMaxCount=6 | out: lpString="Form1") returned 5
	[0105.983] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xd, wParam=0x6, lParam=0xafea28) returned 0x5
	[0105.983] GetWindowLongW (hWnd=0x20202, nIndex=-16) returned 114229248
	[0105.983] GetWindowLongW (hWnd=0x20202, nIndex=-20) returned 328064
	[0105.983] SetWindowLongW (hWnd=0x20202, nIndex=-16, dwNewLong=315555840) returned 114229248
	[0105.983] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x7c, wParam=0xfffffff0, lParam=0xafeaa4) returned 0x0
	[0105.990] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x7d, wParam=0xfffffff0, lParam=0xafeaa4) returned 0x0
	[0105.990] SetWindowLongW (hWnd=0x20202, nIndex=-20, dwNewLong=852096) returned 328064
	[0105.990] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x7c, wParam=0xffffffec, lParam=0xafeaa4) returned 0x0
	[0105.991] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x7d, wParam=0xffffffec, lParam=0xafeaa4) returned 0x0
	[0105.992] SetWindowPos (hWnd=0x20202, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
	[0105.992] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x46, wParam=0x0, lParam=0xafeabc) returned 0x0
	[0105.992] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x83, wParam=0x1, lParam=0xafea94) returned 0x0
	[0105.993] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
	[0105.995] GetWindowPlacement (in: hWnd=0x20202, lpwndpl=0xafe804 | out: lpwndpl=0xafe804) returned 1
	[0105.995] GetClientRect (in: hWnd=0x20202, lpRect=0xafe7b0 | out: lpRect=0xafe7b0) returned 1
	[0105.995] GetWindowTextLengthW (hWnd=0x20202) returned 5
	[0105.995] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0105.995] GetSystemMetrics (nIndex=42) returned 0
	[0105.995] GetWindowTextW (in: hWnd=0x20202, lpString=0xafe67c, nMaxCount=6 | out: lpString="Form1") returned 5
	[0105.995] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xd, wParam=0x6, lParam=0xafe67c) returned 0x5
	[0105.995] GetClientRect (in: hWnd=0x20202, lpRect=0xafe6b8 | out: lpRect=0xafe6b8) returned 1
	[0105.997] GetSysColor (nIndex=10) returned 0xb4b4b4
	[0105.997] GetSysColor (nIndex=2) returned 0xd1b499
	[0105.997] GetSysColor (nIndex=9) returned 0x0
	[0105.997] GetSysColor (nIndex=12) returned 0xababab
	[0105.997] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0105.997] GetSysColor (nIndex=20) returned 0xffffff
	[0105.997] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0105.997] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0105.997] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0105.997] GetSysColor (nIndex=21) returned 0x696969
	[0105.997] GetSysColor (nIndex=22) returned 0xe3e3e3
	[0105.997] GetSysColor (nIndex=20) returned 0xffffff
	[0105.997] GetSysColor (nIndex=18) returned 0x0
	[0105.998] GetSysColor (nIndex=1) returned 0x0
	[0105.998] GetSysColor (nIndex=27) returned 0xead1b9
	[0105.998] GetSysColor (nIndex=28) returned 0xf2e4d7
	[0105.998] GetSysColor (nIndex=17) returned 0x6d6d6d
	[0105.998] GetSysColor (nIndex=13) returned 0xd77800
	[0105.998] GetSysColor (nIndex=14) returned 0xffffff
	[0105.998] GetSysColor (nIndex=26) returned 0xcc6600
	[0105.998] GetSysColor (nIndex=11) returned 0xfcf7f4
	[0105.998] GetSysColor (nIndex=3) returned 0xdbcdbf
	[0105.998] GetSysColor (nIndex=19) returned 0x0
	[0105.998] GetSysColor (nIndex=24) returned 0xe1ffff
	[0105.998] GetSysColor (nIndex=23) returned 0x0
	[0105.998] GetSysColor (nIndex=4) returned 0xf0f0f0
	[0105.998] GetSysColor (nIndex=30) returned 0xf0f0f0
	[0105.998] GetSysColor (nIndex=29) returned 0xd77800
	[0105.998] GetSysColor (nIndex=7) returned 0x0
	[0105.998] GetSysColor (nIndex=0) returned 0xc8c8c8
	[0105.999] GetSysColor (nIndex=5) returned 0xffffff
	[0105.999] GetSysColor (nIndex=6) returned 0x646464
	[0105.999] GetSysColor (nIndex=8) returned 0x0
	[0106.001] GetSystemMetrics (nIndex=80) returned 1
	[0106.024] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x4e006ae, dwData=0x0) returned 1
	[0106.027] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xafe318 | out: lpmi=0xafe318) returned 1
	[0106.028] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x3e010668
	[0106.028] GetDeviceCaps (hdc=0x3e010668, index=12) returned 32
	[0106.029] GetDeviceCaps (hdc=0x3e010668, index=14) returned 1
	[0106.029] DeleteDC (hdc=0x3e010668) returned 1
	[0106.029] GetCurrentObject (hdc=0xf0105ee, type=0x1) returned 0xb00017
	[0106.029] GetCurrentObject (hdc=0xf0105ee, type=0x2) returned 0x900010
	[0106.029] GetCurrentObject (hdc=0xf0105ee, type=0x7) returned 0x21050511
	[0106.029] GetCurrentObject (hdc=0xf0105ee, type=0x6) returned 0x8a01c2
	[0106.030] SaveDC (hdc=0xf0105ee) returned 1
	[0106.030] GetNearestColor (hdc=0xf0105ee, color=0xf0f0f0) returned 0xf0f0f0
	[0106.031] CreateSolidBrush (color=0xf0f0f0) returned 0x41100197
	[0106.032] FillRect (hDC=0xf0105ee, lprc=0xafe558, hbr=0x41100197) returned 1
	[0106.032] DeleteObject (ho=0x41100197) returned 1
	[0106.032] RestoreDC (hdc=0xf0105ee, nSavedDC=-1) returned 1
	[0106.036] GetWindowPlacement (in: hWnd=0x20202, lpwndpl=0xafe7e8 | out: lpwndpl=0xafe7e8) returned 1
	[0106.036] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x47, wParam=0x0, lParam=0xafeabc) returned 0x0
	[0106.036] GetClientRect (in: hWnd=0x20202, lpRect=0xafe798 | out: lpRect=0xafe798) returned 1
	[0106.036] GetWindowRect (in: hWnd=0x20202, lpRect=0xafe798 | out: lpRect=0xafe798) returned 1
	[0106.036] RedrawWindow (hWnd=0x20202, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
	[0106.037] GetSystemMenu (hWnd=0x20202, bRevert=0) returned 0x7009f
	[0106.037] GetWindowPlacement (in: hWnd=0x20202, lpwndpl=0xafeaf0 | out: lpwndpl=0xafeaf0) returned 1
	[0106.037] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf020, uEnable=0x0) returned 0
	[0106.037] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf030, uEnable=0x0) returned 0
	[0106.037] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf060, uEnable=0x0) returned 0
	[0106.037] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf120, uEnable=0x1) returned 1
	[0106.037] EnableMenuItem (hMenu=0x7009f, uIDEnableItem=0xf000, uEnable=0x0) returned 0
	[0106.042] SetLayeredWindowAttributes (hwnd=0x20202, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1
	[0106.047] GetCurrentThreadId () returned 0x11c4
	[0106.055] EnumThreadWindows (dwThreadId=0x11c4, lpfn=0x4e006d6, lParam=0x20202) returned 1
	[0106.086] GetWindowLongW (hWnd=0x7002e, nIndex=-8) returned 0
	[0106.087] GetWindowLongW (hWnd=0x20202, nIndex=-8) returned 0
	[0106.087] GetWindowLongW (hWnd=0x602c0, nIndex=-8) returned 131586
	[0106.157] SetWindowLongW (hWnd=0x602c0, nIndex=-8, dwNewLong=0) returned 131586
	[0106.165] GetParent (hWnd=0x20202) returned 0x0
	[0106.165] GetWindowLongW (hWnd=0x20202, nIndex=-20) returned 852352
	[0106.166] DestroyWindow (hWnd=0x20202) returned 1
	[0106.166] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
	[0106.166] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x46, wParam=0x0, lParam=0xafe9ec) returned 0x0
	[0106.170] GetWindowPlacement (in: hWnd=0x20202, lpwndpl=0xafe718 | out: lpwndpl=0xafe718) returned 1
	[0106.170] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x47, wParam=0x0, lParam=0xafe9ec) returned 0x0
	[0106.170] GetClientRect (in: hWnd=0x20202, lpRect=0xafe6c8 | out: lpRect=0xafe6c8) returned 1
	[0106.170] GetWindowRect (in: hWnd=0x20202, lpRect=0xafe6c8 | out: lpRect=0xafe6c8) returned 1
	[0106.178] GetWindowTextLengthW (hWnd=0x20202) returned 5
	[0106.178] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0106.178] GetSystemMetrics (nIndex=42) returned 0
	[0106.178] GetWindowTextW (in: hWnd=0x20202, lpString=0xafe5f8, nMaxCount=6 | out: lpString="Form1") returned 5
	[0106.178] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0xd, wParam=0x6, lParam=0xafe5f8) returned 0x5
	[0106.178] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
	[0106.179] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x20202, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
	[0106.182] GetCurrentActCtx (in: lphActCtx=0xafea50 | out: lphActCtx=0xafea50*=0xd99f2c) returned 1
	[0106.182] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fb30000
	[0106.183] GetModuleHandleW (lpModuleName=0x0) returned 0x710000
	[0106.183] CreateWindowExW (dwExStyle=0x90080, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="Form1", dwStyle=0x2cf0000, X=156, Y=156, nWidth=136, nHeight=39, hWndParent=0x0, hMenu=0x0, hInstance=0x710000, lpParam=0x0) returned 0x18001c
	[0106.183] SetWindowLongW (hWnd=0x18001c, nIndex=-4, dwNewLong=1950089536) returned 81790438
	[0106.184] GetWindowLongW (hWnd=0x18001c, nIndex=-4) returned 1950089536
	[0106.184] SetWindowLongW (hWnd=0x18001c, nIndex=-4, dwNewLong=81790718) returned 1950089536
	[0106.184] GetWindowLongW (hWnd=0x18001c, nIndex=-4) returned 81790718
	[0106.184] GetWindowLongW (hWnd=0x18001c, nIndex=-16) returned 114229248
	[0106.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x81, wParam=0x0, lParam=0xafe470) returned 0x1
	[0106.186] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x83, wParam=0x0, lParam=0xafe45c) returned 0x0
	[0106.186] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x1, wParam=0x0, lParam=0xafe470) returned 0x0
	[0106.186] GetClientRect (in: hWnd=0x18001c, lpRect=0xafe128 | out: lpRect=0xafe128) returned 1
	[0106.186] GetWindowRect (in: hWnd=0x18001c, lpRect=0xafe128 | out: lpRect=0xafe128) returned 1
	[0106.187] SetWindowTextW (hWnd=0x18001c, lpString="Form1") returned 1
	[0106.187] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xc, wParam=0x0, lParam=0x28fcb84) returned 0x1
	[0106.187] SetLayeredWindowAttributes (hwnd=0x18001c, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1
	[0106.188] GetStartupInfoW (in: lpStartupInfo=0x28fce54 | out: lpStartupInfo=0x28fce54*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) 
	[0106.189] GetParent (hWnd=0x18001c) returned 0x0
	[0106.189] GetStockObject (i=5) returned 0x900015
	[0106.193] GetModuleHandleW (lpModuleName=0x0) returned 0x710000
	[0106.194] CoTaskMemAlloc (cb=0x5a) returned 0xd975b0
	[0106.194] RegisterClassW (lpWndClass=0xafe92c) returned 0xc1a1
	[0106.194] CoTaskMemFree (pv=0xd975b0) 
	[0106.194] GetModuleHandleW (lpModuleName=0x0) returned 0x710000
	[0106.194] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x710000, lpParam=0x0) returned 0x302c8
	[0106.195] SetWindowLongW (hWnd=0x302c8, nIndex=-4, dwNewLong=1950089536) returned 81790758
	[0106.195] GetWindowLongW (hWnd=0x302c8, nIndex=-4) returned 1950089536
	[0106.195] SetWindowLongW (hWnd=0x302c8, nIndex=-4, dwNewLong=81790798) returned 1950089536
	[0106.195] GetWindowLongW (hWnd=0x302c8, nIndex=-4) returned 81790798
	[0106.195] GetWindowLongW (hWnd=0x302c8, nIndex=-16) returned 79691776
	[0106.198] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302c8, Msg=0x24, wParam=0x0, lParam=0xafe4a4) returned 0x0
	[0106.198] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302c8, Msg=0x81, wParam=0x0, lParam=0xafe498) returned 0x1
	[0106.198] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302c8, Msg=0x83, wParam=0x0, lParam=0xafe484) returned 0x0
	[0106.199] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302c8, Msg=0x1, wParam=0x0, lParam=0xafe498) returned 0x0
	[0106.200] SetWindowLongW (hWnd=0x18001c, nIndex=-8, dwNewLong=197320) returned 0
	[0106.201] SendMessageW (hWnd=0x18001c, Msg=0x80, wParam=0x0, lParam=0xa01f1) returned 0x0
	[0106.201] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x80, wParam=0x0, lParam=0xa01f1) returned 0x0
	[0106.202] SendMessageW (hWnd=0x18001c, Msg=0x80, wParam=0x1, lParam=0x902ab) returned 0x0
	[0106.202] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x80, wParam=0x1, lParam=0x902ab) returned 0x0
	[0106.235] GetSystemMenu (hWnd=0x18001c, bRevert=0) returned 0x8009f
	[0106.236] GetWindowPlacement (in: hWnd=0x18001c, lpwndpl=0xafea60 | out: lpwndpl=0xafea60) returned 1
	[0106.236] EnableMenuItem (hMenu=0x8009f, uIDEnableItem=0xf020, uEnable=0x0) returned 0
	[0106.236] EnableMenuItem (hMenu=0x8009f, uIDEnableItem=0xf030, uEnable=0x0) returned 0
	[0106.236] EnableMenuItem (hMenu=0x8009f, uIDEnableItem=0xf060, uEnable=0x0) returned 0
	[0106.236] EnableMenuItem (hMenu=0x8009f, uIDEnableItem=0xf120, uEnable=0x1) returned 0
	[0106.236] EnableMenuItem (hMenu=0x8009f, uIDEnableItem=0xf000, uEnable=0x0) returned 0
	[0106.236] GetClientRect (in: hWnd=0x18001c, lpRect=0xafeaa4 | out: lpRect=0xafeaa4) returned 1
	[0106.236] GetClientRect (in: hWnd=0x18001c, lpRect=0xafea04 | out: lpRect=0xafea04) returned 1
	[0106.236] GetWindowRect (in: hWnd=0x18001c, lpRect=0xafea04 | out: lpRect=0xafea04) returned 1
	[0106.236] SetWindowPos (hWnd=0x18001c, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1
	[0106.236] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x46, wParam=0x0, lParam=0xafe96c) returned 0x0
	[0106.241] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
	[0106.242] GetWindowPlacement (in: hWnd=0x18001c, lpwndpl=0xafe6b4 | out: lpwndpl=0xafe6b4) returned 1
	[0106.243] GetClientRect (in: hWnd=0x18001c, lpRect=0xafe660 | out: lpRect=0xafe660) returned 1
	[0106.243] GetWindowTextLengthW (hWnd=0x18001c) returned 5
	[0106.243] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0106.243] GetSystemMetrics (nIndex=42) returned 0
	[0106.243] GetWindowTextW (in: hWnd=0x18001c, lpString=0xafe52c, nMaxCount=6 | out: lpString="Form1") returned 5
	[0106.243] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xd, wParam=0x6, lParam=0xafe52c) returned 0x5
	[0106.243] GetClientRect (in: hWnd=0x18001c, lpRect=0xafe568 | out: lpRect=0xafe568) returned 1
	[0106.243] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
	[0106.243] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
	[0106.243] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x110507b6
	[0106.243] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
	[0106.243] SaveDC (hdc=0x10105d6) returned 1
	[0106.243] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
	[0106.243] CreateSolidBrush (color=0xf0f0f0) returned 0x42100197
	[0106.243] FillRect (hDC=0x10105d6, lprc=0xafe408, hbr=0x42100197) returned 1
	[0106.243] DeleteObject (ho=0x42100197) returned 1
	[0106.243] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
	[0106.244] GetWindowPlacement (in: hWnd=0x18001c, lpwndpl=0xafe698 | out: lpwndpl=0xafe698) returned 1
	[0106.244] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x47, wParam=0x0, lParam=0xafe96c) returned 0x0
	[0106.244] GetClientRect (in: hWnd=0x18001c, lpRect=0xafe648 | out: lpRect=0xafe648) returned 1
	[0106.244] GetWindowRect (in: hWnd=0x18001c, lpRect=0xafe648 | out: lpRect=0xafe648) returned 1
	[0106.247] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x83, wParam=0x1, lParam=0xafe484) returned 0x0
	[0106.249] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
	[0106.250] GetWindowPlacement (in: hWnd=0x18001c, lpwndpl=0xafe1f4 | out: lpwndpl=0xafe1f4) returned 1
	[0106.250] GetClientRect (in: hWnd=0x18001c, lpRect=0xafe1a0 | out: lpRect=0xafe1a0) returned 1
	[0106.250] GetWindowTextLengthW (hWnd=0x18001c) returned 5
	[0106.250] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0106.250] GetSystemMetrics (nIndex=42) returned 0
	[0106.250] GetWindowTextW (in: hWnd=0x18001c, lpString=0xafe06c, nMaxCount=6 | out: lpString="Form1") returned 5
	[0106.250] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xd, wParam=0x6, lParam=0xafe06c) returned 0x5
	[0106.250] GetClientRect (in: hWnd=0x18001c, lpRect=0xafe0a8 | out: lpRect=0xafe0a8) returned 1
	[0106.250] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017
	[0106.250] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010
	[0106.250] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x110507b6
	[0106.251] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2
	[0106.251] SaveDC (hdc=0x60100ce) returned 1
	[0106.251] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0
	[0106.251] CreateSolidBrush (color=0xf0f0f0) returned 0x43100197
	[0106.251] FillRect (hDC=0x60100ce, lprc=0xafdf48, hbr=0x43100197) returned 1
	[0106.251] DeleteObject (ho=0x43100197) returned 1
	[0106.251] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1
	[0106.251] SetWindowLongW (hWnd=0x18001c, nIndex=-8, dwNewLong=197320) returned 197320
	[0106.254] SendMessageW (hWnd=0x302c8, Msg=0x80, wParam=0x1, lParam=0x902ab) returned 0x0
	[0106.254] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302c8, Msg=0x80, wParam=0x1, lParam=0x902ab) returned 0x0
	[0106.255] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fb30000
	[0106.256] GetWindowLongW (hWnd=0x18001c, nIndex=-16) returned 382664704
	[0106.256] GetWindowTextLengthW (hWnd=0x18001c) returned 5
	[0106.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0106.256] GetSystemMetrics (nIndex=42) returned 0
	[0106.256] GetWindowTextW (in: hWnd=0x18001c, lpString=0xafe988, nMaxCount=6 | out: lpString="Form1") returned 5
	[0106.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xd, wParam=0x6, lParam=0xafe988) returned 0x5
	[0106.256] GetWindowTextLengthW (hWnd=0x18001c) returned 5
	[0106.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0106.256] GetSystemMetrics (nIndex=42) returned 0
	[0106.256] GetWindowTextW (in: hWnd=0x18001c, lpString=0xafe988, nMaxCount=6 | out: lpString="Form1") returned 5
	[0106.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xd, wParam=0x6, lParam=0xafe988) returned 0x5
	[0106.256] GetWindowLongW (hWnd=0x18001c, nIndex=-16) returned 382664704
	[0106.256] GetWindowLongW (hWnd=0x18001c, nIndex=-20) returned 590208
	[0106.256] SetWindowLongW (hWnd=0x18001c, nIndex=-16, dwNewLong=315555840) returned 382664704
	[0106.256] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x7c, wParam=0xfffffff0, lParam=0xafea04) returned 0x0
	[0106.257] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x7d, wParam=0xfffffff0, lParam=0xafea04) returned 0x0
	[0106.257] SetWindowLongW (hWnd=0x18001c, nIndex=-20, dwNewLong=589952) returned 590208
	[0106.257] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x7c, wParam=0xffffffec, lParam=0xafea04) returned 0x0
	[0106.258] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x7d, wParam=0xffffffec, lParam=0xafea04) returned 0x0
	[0106.258] SetWindowPos (hWnd=0x18001c, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
	[0106.258] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x46, wParam=0x0, lParam=0xafea1c) returned 0x0
	[0106.258] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x83, wParam=0x1, lParam=0xafe9f4) returned 0x0
	[0106.260] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
	[0106.261] GetWindowPlacement (in: hWnd=0x18001c, lpwndpl=0xafe764 | out: lpwndpl=0xafe764) returned 1
	[0106.261] GetClientRect (in: hWnd=0x18001c, lpRect=0xafe710 | out: lpRect=0xafe710) returned 1
	[0106.261] GetWindowTextLengthW (hWnd=0x18001c) returned 5
	[0106.261] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0106.261] GetSystemMetrics (nIndex=42) returned 0
	[0106.261] GetWindowTextW (in: hWnd=0x18001c, lpString=0xafe5dc, nMaxCount=6 | out: lpString="Form1") returned 5
	[0106.261] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xd, wParam=0x6, lParam=0xafe5dc) returned 0x5
	[0106.261] GetClientRect (in: hWnd=0x18001c, lpRect=0xafe618 | out: lpRect=0xafe618) returned 1
	[0106.261] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
	[0106.261] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
	[0106.262] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x110507b6
	[0106.262] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
	[0106.262] SaveDC (hdc=0x10105d6) returned 1
	[0106.262] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
	[0106.262] CreateSolidBrush (color=0xf0f0f0) returned 0x44100197
	[0106.262] FillRect (hDC=0x10105d6, lprc=0xafe4b8, hbr=0x44100197) returned 1
	[0106.262] DeleteObject (ho=0x44100197) returned 1
	[0106.262] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
	[0106.262] GetWindowPlacement (in: hWnd=0x18001c, lpwndpl=0xafe748 | out: lpwndpl=0xafe748) returned 1
	[0106.262] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x47, wParam=0x0, lParam=0xafea1c) returned 0x0
	[0106.262] GetClientRect (in: hWnd=0x18001c, lpRect=0xafe6f8 | out: lpRect=0xafe6f8) returned 1
	[0106.262] GetWindowRect (in: hWnd=0x18001c, lpRect=0xafe6f8 | out: lpRect=0xafe6f8) returned 1
	[0106.263] RedrawWindow (hWnd=0x18001c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
	[0106.263] GetSystemMenu (hWnd=0x18001c, bRevert=0) returned 0x8009f
	[0106.263] GetWindowPlacement (in: hWnd=0x18001c, lpwndpl=0xafea50 | out: lpwndpl=0xafea50) returned 1
	[0106.263] EnableMenuItem (hMenu=0x8009f, uIDEnableItem=0xf020, uEnable=0x0) returned 0
	[0106.263] EnableMenuItem (hMenu=0x8009f, uIDEnableItem=0xf030, uEnable=0x0) returned 0
	[0106.263] EnableMenuItem (hMenu=0x8009f, uIDEnableItem=0xf060, uEnable=0x0) returned 0
	[0106.263] EnableMenuItem (hMenu=0x8009f, uIDEnableItem=0xf120, uEnable=0x1) returned 1
	[0106.263] EnableMenuItem (hMenu=0x8009f, uIDEnableItem=0xf000, uEnable=0x0) returned 0
	[0106.263] SetWindowLongW (hWnd=0x602c0, nIndex=-8, dwNewLong=1572892) returned 458798
	[0106.311] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Rand123", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x12
	[0106.311] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Rand123", nBufferLength=0x12, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\Rand123", lpFilePart=0x0) returned 0x11
	[0106.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea84) returned 1
	[0106.311] GetFileAttributesExW (in: lpFileName="C:\\FD1HVy\\Rand123" (normalized: "c:\\fd1hvy\\rand123"), fInfoLevelId=0x0, lpFileInformation=0xafeb00 | out: lpFileInformation=0xafeb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea80) returned 1
	[0106.312] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Rand123", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x12
	[0106.312] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Rand123", nBufferLength=0x12, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\Rand123", lpFilePart=0x0) returned 0x11
	[0106.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea18) returned 1
	[0106.366] GetFileAttributesExW (in: lpFileName="C:\\FD1HVy\\Rand123" (normalized: "c:\\fd1hvy\\rand123"), fInfoLevelId=0x0, lpFileInformation=0xafea94 | out: lpFileInformation=0xafea94*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea14) returned 1
	[0106.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea18) returned 1
	[0106.367] GetFileAttributesExW (in: lpFileName="C:\\FD1HVy\\Rand123" (normalized: "c:\\fd1hvy\\rand123"), fInfoLevelId=0x0, lpFileInformation=0xafea94 | out: lpFileInformation=0xafea94*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea14) returned 1
	[0106.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea18) returned 1
	[0106.367] GetFileAttributesExW (in: lpFileName="C:\\FD1HVy" (normalized: "c:\\fd1hvy"), fInfoLevelId=0x0, lpFileInformation=0xafea94 | out: lpFileInformation=0xafea94*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea14) returned 1
	[0106.453] CreateDirectoryW (lpPathName="C:\\FD1HVy" (normalized: "c:\\fd1hvy"), lpSecurityAttributes=0x0) returned 1
	[0106.455] CreateDirectoryW (lpPathName="C:\\FD1HVy\\Rand123" (normalized: "c:\\fd1hvy\\rand123"), lpSecurityAttributes=0x0) returned 1
	[0106.590] GetCurrentProcessId () returned 0x11b4
	[0107.688] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0xafe40c | out: lpLuid=0xafe40c*(LowPart=0x14, HighPart=0)) returned 1
	[0107.690] GetCurrentProcess () returned 0xffffffff
	[0107.691] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xafe408 | out: TokenHandle=0xafe408*=0x354) returned 1
	[0107.691] AdjustTokenPrivileges (in: TokenHandle=0x354, DisableAllPrivileges=0, NewState=0x28fdc3c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0107.691] CloseHandle (hObject=0x354) returned 1
	[0107.698] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x38d94c8, Length=0x20000, ResultLength=0xafeaf4 | out: SystemInformation=0x38d94c8, ResultLength=0xafeaf4*=0x21cc8) returned 0xc0000004
	[0107.712] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x38f94e8, Length=0x244c8, ResultLength=0xafeaf4 | out: SystemInformation=0x38f94e8, ResultLength=0xafeaf4*=0x18858) returned 0x0
	[0107.744] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0xd99a20 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0107.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0107.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", lpFilePart=0x0) returned 0x30
	[0107.748] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Rand123\\local.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c
	[0107.748] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Rand123\\local.exe", nBufferLength=0x1c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\Rand123\\local.exe", lpFilePart=0x0) returned 0x1b
	[0107.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea9c) returned 1
	[0107.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\compito italiano.doc.exe"), fInfoLevelId=0x0, lpFileInformation=0xafeb18 | out: lpFileInformation=0xafeb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f797700, ftCreationTime.dwHighDateTime=0x1d60875, ftLastAccessTime.dwLowDateTime=0x60120d80, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xfb9f8000, ftLastWriteTime.dwHighDateTime=0x1d6086d, nFileSizeHigh=0x0, nFileSizeLow=0xe000)) returned 1
	[0107.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea98) returned 1
	[0107.749] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\compito italiano.doc.exe"), lpNewFileName="C:\\FD1HVy\\Rand123\\local.exe" (normalized: "c:\\fd1hvy\\rand123\\local.exe")) returned 1
	[0107.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0107.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x18
	[0107.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x18, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
	[0107.883] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7e0907a3, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xa17dbc8e, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9cd40
	[0107.884] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7e0907a3, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xa17dbc8e, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.884] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fb5760, ftCreationTime.dwHighDateTime=0x1d5eea7, ftLastAccessTime.dwLowDateTime=0x34319930, ftLastAccessTime.dwHighDateTime=0x1d5e785, ftLastWriteTime.dwLowDateTime=0x34319930, ftLastWriteTime.dwHighDateTime=0x1d5e785, nFileSizeHigh=0x0, nFileSizeLow=0x12ab7, dwReserved0=0x0, dwReserved1=0x0, cFileName="-UiNR9TB1IHsrJ.csv", cAlternateFileName="-UINR9~1.CSV")) returned 1
	[0107.885] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd02a1420, ftCreationTime.dwHighDateTime=0x1d5e18b, ftLastAccessTime.dwLowDateTime=0x3b1551a0, ftLastAccessTime.dwHighDateTime=0x1d5e31c, ftLastWriteTime.dwLowDateTime=0x3b1551a0, ftLastWriteTime.dwHighDateTime=0x1d5e31c, nFileSizeHigh=0x0, nFileSizeLow=0x16233, dwReserved0=0x0, dwReserved1=0x0, cFileName="1x 7HEmPpq80rc57.jpg", cAlternateFileName="1X7HEM~1.JPG")) returned 1
	[0107.885] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe055da40, ftCreationTime.dwHighDateTime=0x1d5e6f0, ftLastAccessTime.dwLowDateTime=0x65897e80, ftLastAccessTime.dwHighDateTime=0x1d5ecd0, ftLastWriteTime.dwLowDateTime=0x65897e80, ftLastWriteTime.dwHighDateTime=0x1d5ecd0, nFileSizeHigh=0x0, nFileSizeLow=0xae9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="4j6zdyfIWuAdIxo.mp3", cAlternateFileName="4J6ZDY~1.MP3")) returned 1
	[0107.885] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda697d70, ftCreationTime.dwHighDateTime=0x1d5e282, ftLastAccessTime.dwLowDateTime=0x7959200, ftLastAccessTime.dwHighDateTime=0x1d5e51e, ftLastWriteTime.dwLowDateTime=0x7959200, ftLastWriteTime.dwHighDateTime=0x1d5e51e, nFileSizeHigh=0x0, nFileSizeLow=0x694a, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ju36F9C.jpg", cAlternateFileName="")) returned 1
	[0107.885] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3be760, ftCreationTime.dwHighDateTime=0x1d5ee2e, ftLastAccessTime.dwLowDateTime=0x4f346570, ftLastAccessTime.dwHighDateTime=0x1d5e896, ftLastWriteTime.dwLowDateTime=0x4f346570, ftLastWriteTime.dwHighDateTime=0x1d5e896, nFileSizeHigh=0x0, nFileSizeLow=0xd5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="5yz93b622bSpRnho9w.avi", cAlternateFileName="5YZ93B~1.AVI")) returned 1
	[0107.886] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38aaf50, ftCreationTime.dwHighDateTime=0x1d5ea88, ftLastAccessTime.dwLowDateTime=0x4e5e8660, ftLastAccessTime.dwHighDateTime=0x1d5e118, ftLastWriteTime.dwLowDateTime=0x4e5e8660, ftLastWriteTime.dwHighDateTime=0x1d5e118, nFileSizeHigh=0x0, nFileSizeLow=0xc7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="b1Gx75LQIbL3.avi", cAlternateFileName="B1GX75~1.AVI")) returned 1
	[0107.886] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9e3b130, ftCreationTime.dwHighDateTime=0x1d5ec7e, ftLastAccessTime.dwLowDateTime=0xea601430, ftLastAccessTime.dwHighDateTime=0x1d5e6b2, ftLastWriteTime.dwLowDateTime=0xea601430, ftLastWriteTime.dwHighDateTime=0x1d5e6b2, nFileSizeHigh=0x0, nFileSizeLow=0x1870d, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3PP9q0NJjQZz68vcJxQ.pdf", cAlternateFileName="C3PP9Q~1.PDF")) returned 1
	[0107.886] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d331e0, ftCreationTime.dwHighDateTime=0x1d5e227, ftLastAccessTime.dwLowDateTime=0xf3396d20, ftLastAccessTime.dwHighDateTime=0x1d5e330, ftLastWriteTime.dwLowDateTime=0xf3396d20, ftLastWriteTime.dwHighDateTime=0x1d5e330, nFileSizeHigh=0x0, nFileSizeLow=0x10c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="C8lLIrwchw.mp3", cAlternateFileName="C8LLIR~1.MP3")) returned 1
	[0107.886] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26963c00, ftCreationTime.dwHighDateTime=0x1d5e19e, ftLastAccessTime.dwLowDateTime=0x19bdb1f0, ftLastAccessTime.dwHighDateTime=0x1d5e1ff, ftLastWriteTime.dwLowDateTime=0x19bdb1f0, ftLastWriteTime.dwHighDateTime=0x1d5e1ff, nFileSizeHigh=0x0, nFileSizeLow=0x17a16, dwReserved0=0x0, dwReserved1=0x0, cFileName="d0pi2c.xls", cAlternateFileName="")) returned 1
	[0107.886] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0107.886] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bb1490, ftCreationTime.dwHighDateTime=0x1d5ef95, ftLastAccessTime.dwLowDateTime=0x4090000, ftLastAccessTime.dwHighDateTime=0x1d5e6b7, ftLastWriteTime.dwLowDateTime=0x4090000, ftLastWriteTime.dwHighDateTime=0x1d5e6b7, nFileSizeHigh=0x0, nFileSizeLow=0x15584, dwReserved0=0x0, dwReserved1=0x0, cFileName="E5x7t 1VGFZzn2OlE.mp4", cAlternateFileName="E5X7T1~1.MP4")) returned 1
	[0107.886] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89910860, ftCreationTime.dwHighDateTime=0x1d5e80d, ftLastAccessTime.dwLowDateTime=0x1e3936d0, ftLastAccessTime.dwHighDateTime=0x1d5e553, ftLastWriteTime.dwLowDateTime=0x1e3936d0, ftLastWriteTime.dwHighDateTime=0x1d5e553, nFileSizeHigh=0x0, nFileSizeLow=0x15249, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESaXfyqQyo_eTfa_.gif", cAlternateFileName="ESAXFY~1.GIF")) returned 1
	[0107.887] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10becb90, ftCreationTime.dwHighDateTime=0x1d5edc4, ftLastAccessTime.dwLowDateTime=0x4e438a00, ftLastAccessTime.dwHighDateTime=0x1d5ebfd, ftLastWriteTime.dwLowDateTime=0x4e438a00, ftLastWriteTime.dwHighDateTime=0x1d5ebfd, nFileSizeHigh=0x0, nFileSizeLow=0x17a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="F_rpYNSkdXLR42Xr.mp3", cAlternateFileName="F_RPYN~1.MP3")) returned 1
	[0107.887] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ec45a20, ftCreationTime.dwHighDateTime=0x1d5f08e, ftLastAccessTime.dwLowDateTime=0x13906340, ftLastAccessTime.dwHighDateTime=0x1d5f113, ftLastWriteTime.dwLowDateTime=0x13906340, ftLastWriteTime.dwHighDateTime=0x1d5f113, nFileSizeHigh=0x0, nFileSizeLow=0x16e3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="gCiDO8Sx.pps", cAlternateFileName="")) returned 1
	[0107.887] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c85d570, ftCreationTime.dwHighDateTime=0x1d5ee8a, ftLastAccessTime.dwLowDateTime=0x8fb3ffc0, ftLastAccessTime.dwHighDateTime=0x1d5ef53, ftLastWriteTime.dwLowDateTime=0x8fb3ffc0, ftLastWriteTime.dwHighDateTime=0x1d5ef53, nFileSizeHigh=0x0, nFileSizeLow=0x6b53, dwReserved0=0x0, dwReserved1=0x0, cFileName="hqBdemWhu2I.pps", cAlternateFileName="HQBDEM~1.PPS")) returned 1
	[0107.887] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd20ccdd0, ftCreationTime.dwHighDateTime=0x1d5ecc3, ftLastAccessTime.dwLowDateTime=0x3df4e140, ftLastAccessTime.dwHighDateTime=0x1d5e274, ftLastWriteTime.dwLowDateTime=0x3df4e140, ftLastWriteTime.dwHighDateTime=0x1d5e274, nFileSizeHigh=0x0, nFileSizeLow=0xb73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hTGDeLLF20kAtJdc.m4a", cAlternateFileName="HTGDEL~1.M4A")) returned 1
	[0107.887] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b02670, ftCreationTime.dwHighDateTime=0x1d5ee3e, ftLastAccessTime.dwLowDateTime=0xe28d90f0, ftLastAccessTime.dwHighDateTime=0x1d5eb05, ftLastWriteTime.dwLowDateTime=0xe28d90f0, ftLastWriteTime.dwHighDateTime=0x1d5eb05, nFileSizeHigh=0x0, nFileSizeLow=0x1808b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IgQCk0MAorOokm1kXx8k.swf", cAlternateFileName="IGQCK0~1.SWF")) returned 1
	[0107.888] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937a1950, ftCreationTime.dwHighDateTime=0x1d5e65c, ftLastAccessTime.dwLowDateTime=0x383473e0, ftLastAccessTime.dwHighDateTime=0x1d5e9e2, ftLastWriteTime.dwLowDateTime=0x383473e0, ftLastWriteTime.dwHighDateTime=0x1d5e9e2, nFileSizeHigh=0x0, nFileSizeLow=0xc138, dwReserved0=0x0, dwReserved1=0x0, cFileName="JZ9KqhlxFnP.odt", cAlternateFileName="JZ9KQH~1.ODT")) returned 1
	[0107.888] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17f33d10, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0xf9de7530, ftLastAccessTime.dwHighDateTime=0x1d5ebc8, ftLastWriteTime.dwLowDateTime=0xf9de7530, ftLastWriteTime.dwHighDateTime=0x1d5ebc8, nFileSizeHigh=0x0, nFileSizeLow=0x15ed5, dwReserved0=0x0, dwReserved1=0x0, cFileName="KbWvD.ots", cAlternateFileName="")) returned 1
	[0107.888] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedf8f870, ftCreationTime.dwHighDateTime=0x1d5e33b, ftLastAccessTime.dwLowDateTime=0x65bbeea0, ftLastAccessTime.dwHighDateTime=0x1d5e0e7, ftLastWriteTime.dwLowDateTime=0x65bbeea0, ftLastWriteTime.dwHighDateTime=0x1d5e0e7, nFileSizeHigh=0x0, nFileSizeLow=0x14993, dwReserved0=0x0, dwReserved1=0x0, cFileName="knA_nHwW5W9.swf", cAlternateFileName="KNA_NH~1.SWF")) returned 1
	[0107.888] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd61850, ftCreationTime.dwHighDateTime=0x1d5e207, ftLastAccessTime.dwLowDateTime=0xb50967f0, ftLastAccessTime.dwHighDateTime=0x1d5eaf4, ftLastWriteTime.dwLowDateTime=0xb50967f0, ftLastWriteTime.dwHighDateTime=0x1d5eaf4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYHaY30ju.odt", cAlternateFileName="LYHAY3~1.ODT")) returned 1
	[0107.888] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418729e0, ftCreationTime.dwHighDateTime=0x1d5e881, ftLastAccessTime.dwLowDateTime=0xf1ea2530, ftLastAccessTime.dwHighDateTime=0x1d5f033, ftLastWriteTime.dwLowDateTime=0xf1ea2530, ftLastWriteTime.dwHighDateTime=0x1d5f033, nFileSizeHigh=0x0, nFileSizeLow=0x2624, dwReserved0=0x0, dwReserved1=0x0, cFileName="mj-_XqsOUTRx7pT0e.jpg", cAlternateFileName="MJ-_XQ~1.JPG")) returned 1
	[0107.888] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84633f90, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0x69907ba0, ftLastAccessTime.dwHighDateTime=0x1d5ed2f, ftLastWriteTime.dwLowDateTime=0x69907ba0, ftLastWriteTime.dwHighDateTime=0x1d5ed2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mm3aHAOeWto", cAlternateFileName="MM3AHA~1")) returned 1
	[0107.889] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6aab60, ftCreationTime.dwHighDateTime=0x1d5e325, ftLastAccessTime.dwLowDateTime=0x4f7b5af0, ftLastAccessTime.dwHighDateTime=0x1d5e811, ftLastWriteTime.dwLowDateTime=0x4f7b5af0, ftLastWriteTime.dwHighDateTime=0x1d5e811, nFileSizeHigh=0x0, nFileSizeLow=0x188f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MNd8.mp3", cAlternateFileName="")) returned 1
	[0107.889] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a99bce0, ftCreationTime.dwHighDateTime=0x1d5e7ac, ftLastAccessTime.dwLowDateTime=0x682cd4f0, ftLastAccessTime.dwHighDateTime=0x1d5e584, ftLastWriteTime.dwLowDateTime=0x682cd4f0, ftLastWriteTime.dwHighDateTime=0x1d5e584, nFileSizeHigh=0x0, nFileSizeLow=0x105a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsCcuUbl0D9hBva9o-Gb.xls", cAlternateFileName="MSCCUU~1.XLS")) returned 1
	[0107.889] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316feea0, ftCreationTime.dwHighDateTime=0x1d5e0d6, ftLastAccessTime.dwLowDateTime=0x169e2b0, ftLastAccessTime.dwHighDateTime=0x1d5ec6b, ftLastWriteTime.dwLowDateTime=0x169e2b0, ftLastWriteTime.dwHighDateTime=0x1d5ec6b, nFileSizeHigh=0x0, nFileSizeLow=0x9feb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngCAG3Lf.m4a", cAlternateFileName="")) returned 1
	[0107.889] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bcdb60, ftCreationTime.dwHighDateTime=0x1d5e1d4, ftLastAccessTime.dwLowDateTime=0x2818d0f0, ftLastAccessTime.dwHighDateTime=0x1d5ecad, ftLastWriteTime.dwLowDateTime=0x2818d0f0, ftLastWriteTime.dwHighDateTime=0x1d5ecad, nFileSizeHigh=0x0, nFileSizeLow=0x8fe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="O6p NRcFtjyQ0R2.mkv", cAlternateFileName="O6PNRC~1.MKV")) returned 1
	[0107.889] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6718d500, ftCreationTime.dwHighDateTime=0x1d5e615, ftLastAccessTime.dwLowDateTime=0x415a8400, ftLastAccessTime.dwHighDateTime=0x1d5ec44, ftLastWriteTime.dwLowDateTime=0x415a8400, ftLastWriteTime.dwHighDateTime=0x1d5ec44, nFileSizeHigh=0x0, nFileSizeLow=0x11484, dwReserved0=0x0, dwReserved1=0x0, cFileName="pJpxx4-5_-Ff-0ern.mp3", cAlternateFileName="PJPXX4~1.MP3")) returned 1
	[0107.889] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa678b9d0, ftCreationTime.dwHighDateTime=0x1d5e774, ftLastAccessTime.dwLowDateTime=0xfd12a7c0, ftLastAccessTime.dwHighDateTime=0x1d5eb10, ftLastWriteTime.dwLowDateTime=0xfd12a7c0, ftLastWriteTime.dwHighDateTime=0x1d5eb10, nFileSizeHigh=0x0, nFileSizeLow=0x13a05, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPBZxZ.mkv", cAlternateFileName="")) returned 1
	[0107.889] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5712e40, ftCreationTime.dwHighDateTime=0x1d5e39e, ftLastAccessTime.dwLowDateTime=0xeb29bbf0, ftLastAccessTime.dwHighDateTime=0x1d5efa9, ftLastWriteTime.dwLowDateTime=0xeb29bbf0, ftLastWriteTime.dwHighDateTime=0x1d5efa9, nFileSizeHigh=0x0, nFileSizeLow=0x94e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="pZpfWsYWRe.pdf", cAlternateFileName="PZPFWS~1.PDF")) returned 1
	[0107.890] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1662d720, ftCreationTime.dwHighDateTime=0x1d5eff5, ftLastAccessTime.dwLowDateTime=0x7eff8b50, ftLastAccessTime.dwHighDateTime=0x1d5e11f, ftLastWriteTime.dwLowDateTime=0x7eff8b50, ftLastWriteTime.dwHighDateTime=0x1d5e11f, nFileSizeHigh=0x0, nFileSizeLow=0x16191, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q2k R_LJCrLq0.bmp", cAlternateFileName="Q2KR_L~1.BMP")) returned 1
	[0107.890] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94a7b240, ftCreationTime.dwHighDateTime=0x1d5eebf, ftLastAccessTime.dwLowDateTime=0xbe0d9f80, ftLastAccessTime.dwHighDateTime=0x1d5eba6, ftLastWriteTime.dwLowDateTime=0xbe0d9f80, ftLastWriteTime.dwHighDateTime=0x1d5eba6, nFileSizeHigh=0x0, nFileSizeLow=0xbee5, dwReserved0=0x0, dwReserved1=0x0, cFileName="wbD6Jpp1VpuBL6f.pdf", cAlternateFileName="WBD6JP~1.PDF")) returned 1
	[0107.890] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1811130, ftCreationTime.dwHighDateTime=0x1d5e252, ftLastAccessTime.dwLowDateTime=0xe9a671a0, ftLastAccessTime.dwHighDateTime=0x1d5f0f9, ftLastWriteTime.dwLowDateTime=0xe9a671a0, ftLastWriteTime.dwHighDateTime=0x1d5f0f9, nFileSizeHigh=0x0, nFileSizeLow=0x18ed7, dwReserved0=0x0, dwReserved1=0x0, cFileName="XnZS-qtTFQpWGv.swf", cAlternateFileName="XNZS-Q~1.SWF")) returned 1
	[0107.890] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee8c680, ftCreationTime.dwHighDateTime=0x1d5e2b5, ftLastAccessTime.dwLowDateTime=0xa00581c0, ftLastAccessTime.dwHighDateTime=0x1d5ec72, ftLastWriteTime.dwLowDateTime=0xa00581c0, ftLastWriteTime.dwHighDateTime=0x1d5ec72, nFileSizeHigh=0x0, nFileSizeLow=0x6e86, dwReserved0=0x0, dwReserved1=0x0, cFileName="YENM3XHoRa 9Bl8.avi", cAlternateFileName="YENM3X~1.AVI")) returned 1
	[0107.890] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8574a50, ftCreationTime.dwHighDateTime=0x1d5e16c, ftLastAccessTime.dwLowDateTime=0x338539c0, ftLastAccessTime.dwHighDateTime=0x1d5e4aa, ftLastWriteTime.dwLowDateTime=0x338539c0, ftLastWriteTime.dwHighDateTime=0x1d5e4aa, nFileSizeHigh=0x0, nFileSizeLow=0xfc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="yJZvE.ots", cAlternateFileName="")) returned 1
	[0107.890] FindNextFileW (in: hFindFile=0xd9cd40, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.890] FindClose (in: hFindFile=0xd9cd40 | out: hFindFile=0xd9cd40) returned 1
	[0107.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0107.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0107.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0107.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x18
	[0107.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x18, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
	[0107.891] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa17dbc8e, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xa17dbc8e, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d080
	[0107.891] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa17dbc8e, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xa17dbc8e, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.892] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fb5760, ftCreationTime.dwHighDateTime=0x1d5eea7, ftLastAccessTime.dwLowDateTime=0x34319930, ftLastAccessTime.dwHighDateTime=0x1d5e785, ftLastWriteTime.dwLowDateTime=0x34319930, ftLastWriteTime.dwHighDateTime=0x1d5e785, nFileSizeHigh=0x0, nFileSizeLow=0x12ab7, dwReserved0=0x0, dwReserved1=0x0, cFileName="-UiNR9TB1IHsrJ.csv", cAlternateFileName="-UINR9~1.CSV")) returned 1
	[0107.892] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd02a1420, ftCreationTime.dwHighDateTime=0x1d5e18b, ftLastAccessTime.dwLowDateTime=0x3b1551a0, ftLastAccessTime.dwHighDateTime=0x1d5e31c, ftLastWriteTime.dwLowDateTime=0x3b1551a0, ftLastWriteTime.dwHighDateTime=0x1d5e31c, nFileSizeHigh=0x0, nFileSizeLow=0x16233, dwReserved0=0x0, dwReserved1=0x0, cFileName="1x 7HEmPpq80rc57.jpg", cAlternateFileName="1X7HEM~1.JPG")) returned 1
	[0107.892] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe055da40, ftCreationTime.dwHighDateTime=0x1d5e6f0, ftLastAccessTime.dwLowDateTime=0x65897e80, ftLastAccessTime.dwHighDateTime=0x1d5ecd0, ftLastWriteTime.dwLowDateTime=0x65897e80, ftLastWriteTime.dwHighDateTime=0x1d5ecd0, nFileSizeHigh=0x0, nFileSizeLow=0xae9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="4j6zdyfIWuAdIxo.mp3", cAlternateFileName="4J6ZDY~1.MP3")) returned 1
	[0107.892] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda697d70, ftCreationTime.dwHighDateTime=0x1d5e282, ftLastAccessTime.dwLowDateTime=0x7959200, ftLastAccessTime.dwHighDateTime=0x1d5e51e, ftLastWriteTime.dwLowDateTime=0x7959200, ftLastWriteTime.dwHighDateTime=0x1d5e51e, nFileSizeHigh=0x0, nFileSizeLow=0x694a, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ju36F9C.jpg", cAlternateFileName="")) returned 1
	[0107.892] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3be760, ftCreationTime.dwHighDateTime=0x1d5ee2e, ftLastAccessTime.dwLowDateTime=0x4f346570, ftLastAccessTime.dwHighDateTime=0x1d5e896, ftLastWriteTime.dwLowDateTime=0x4f346570, ftLastWriteTime.dwHighDateTime=0x1d5e896, nFileSizeHigh=0x0, nFileSizeLow=0xd5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="5yz93b622bSpRnho9w.avi", cAlternateFileName="5YZ93B~1.AVI")) returned 1
	[0107.893] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38aaf50, ftCreationTime.dwHighDateTime=0x1d5ea88, ftLastAccessTime.dwLowDateTime=0x4e5e8660, ftLastAccessTime.dwHighDateTime=0x1d5e118, ftLastWriteTime.dwLowDateTime=0x4e5e8660, ftLastWriteTime.dwHighDateTime=0x1d5e118, nFileSizeHigh=0x0, nFileSizeLow=0xc7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="b1Gx75LQIbL3.avi", cAlternateFileName="B1GX75~1.AVI")) returned 1
	[0107.893] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9e3b130, ftCreationTime.dwHighDateTime=0x1d5ec7e, ftLastAccessTime.dwLowDateTime=0xea601430, ftLastAccessTime.dwHighDateTime=0x1d5e6b2, ftLastWriteTime.dwLowDateTime=0xea601430, ftLastWriteTime.dwHighDateTime=0x1d5e6b2, nFileSizeHigh=0x0, nFileSizeLow=0x1870d, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3PP9q0NJjQZz68vcJxQ.pdf", cAlternateFileName="C3PP9Q~1.PDF")) returned 1
	[0107.893] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d331e0, ftCreationTime.dwHighDateTime=0x1d5e227, ftLastAccessTime.dwLowDateTime=0xf3396d20, ftLastAccessTime.dwHighDateTime=0x1d5e330, ftLastWriteTime.dwLowDateTime=0xf3396d20, ftLastWriteTime.dwHighDateTime=0x1d5e330, nFileSizeHigh=0x0, nFileSizeLow=0x10c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="C8lLIrwchw.mp3", cAlternateFileName="C8LLIR~1.MP3")) returned 1
	[0107.893] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26963c00, ftCreationTime.dwHighDateTime=0x1d5e19e, ftLastAccessTime.dwLowDateTime=0x19bdb1f0, ftLastAccessTime.dwHighDateTime=0x1d5e1ff, ftLastWriteTime.dwLowDateTime=0x19bdb1f0, ftLastWriteTime.dwHighDateTime=0x1d5e1ff, nFileSizeHigh=0x0, nFileSizeLow=0x17a16, dwReserved0=0x0, dwReserved1=0x0, cFileName="d0pi2c.xls", cAlternateFileName="")) returned 1
	[0107.893] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0107.894] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bb1490, ftCreationTime.dwHighDateTime=0x1d5ef95, ftLastAccessTime.dwLowDateTime=0x4090000, ftLastAccessTime.dwHighDateTime=0x1d5e6b7, ftLastWriteTime.dwLowDateTime=0x4090000, ftLastWriteTime.dwHighDateTime=0x1d5e6b7, nFileSizeHigh=0x0, nFileSizeLow=0x15584, dwReserved0=0x0, dwReserved1=0x0, cFileName="E5x7t 1VGFZzn2OlE.mp4", cAlternateFileName="E5X7T1~1.MP4")) returned 1
	[0107.895] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89910860, ftCreationTime.dwHighDateTime=0x1d5e80d, ftLastAccessTime.dwLowDateTime=0x1e3936d0, ftLastAccessTime.dwHighDateTime=0x1d5e553, ftLastWriteTime.dwLowDateTime=0x1e3936d0, ftLastWriteTime.dwHighDateTime=0x1d5e553, nFileSizeHigh=0x0, nFileSizeLow=0x15249, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESaXfyqQyo_eTfa_.gif", cAlternateFileName="ESAXFY~1.GIF")) returned 1
	[0107.895] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10becb90, ftCreationTime.dwHighDateTime=0x1d5edc4, ftLastAccessTime.dwLowDateTime=0x4e438a00, ftLastAccessTime.dwHighDateTime=0x1d5ebfd, ftLastWriteTime.dwLowDateTime=0x4e438a00, ftLastWriteTime.dwHighDateTime=0x1d5ebfd, nFileSizeHigh=0x0, nFileSizeLow=0x17a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="F_rpYNSkdXLR42Xr.mp3", cAlternateFileName="F_RPYN~1.MP3")) returned 1
	[0107.895] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ec45a20, ftCreationTime.dwHighDateTime=0x1d5f08e, ftLastAccessTime.dwLowDateTime=0x13906340, ftLastAccessTime.dwHighDateTime=0x1d5f113, ftLastWriteTime.dwLowDateTime=0x13906340, ftLastWriteTime.dwHighDateTime=0x1d5f113, nFileSizeHigh=0x0, nFileSizeLow=0x16e3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="gCiDO8Sx.pps", cAlternateFileName="")) returned 1
	[0107.895] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c85d570, ftCreationTime.dwHighDateTime=0x1d5ee8a, ftLastAccessTime.dwLowDateTime=0x8fb3ffc0, ftLastAccessTime.dwHighDateTime=0x1d5ef53, ftLastWriteTime.dwLowDateTime=0x8fb3ffc0, ftLastWriteTime.dwHighDateTime=0x1d5ef53, nFileSizeHigh=0x0, nFileSizeLow=0x6b53, dwReserved0=0x0, dwReserved1=0x0, cFileName="hqBdemWhu2I.pps", cAlternateFileName="HQBDEM~1.PPS")) returned 1
	[0107.895] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd20ccdd0, ftCreationTime.dwHighDateTime=0x1d5ecc3, ftLastAccessTime.dwLowDateTime=0x3df4e140, ftLastAccessTime.dwHighDateTime=0x1d5e274, ftLastWriteTime.dwLowDateTime=0x3df4e140, ftLastWriteTime.dwHighDateTime=0x1d5e274, nFileSizeHigh=0x0, nFileSizeLow=0xb73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hTGDeLLF20kAtJdc.m4a", cAlternateFileName="HTGDEL~1.M4A")) returned 1
	[0107.896] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b02670, ftCreationTime.dwHighDateTime=0x1d5ee3e, ftLastAccessTime.dwLowDateTime=0xe28d90f0, ftLastAccessTime.dwHighDateTime=0x1d5eb05, ftLastWriteTime.dwLowDateTime=0xe28d90f0, ftLastWriteTime.dwHighDateTime=0x1d5eb05, nFileSizeHigh=0x0, nFileSizeLow=0x1808b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IgQCk0MAorOokm1kXx8k.swf", cAlternateFileName="IGQCK0~1.SWF")) returned 1
	[0107.896] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937a1950, ftCreationTime.dwHighDateTime=0x1d5e65c, ftLastAccessTime.dwLowDateTime=0x383473e0, ftLastAccessTime.dwHighDateTime=0x1d5e9e2, ftLastWriteTime.dwLowDateTime=0x383473e0, ftLastWriteTime.dwHighDateTime=0x1d5e9e2, nFileSizeHigh=0x0, nFileSizeLow=0xc138, dwReserved0=0x0, dwReserved1=0x0, cFileName="JZ9KqhlxFnP.odt", cAlternateFileName="JZ9KQH~1.ODT")) returned 1
	[0107.896] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17f33d10, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0xf9de7530, ftLastAccessTime.dwHighDateTime=0x1d5ebc8, ftLastWriteTime.dwLowDateTime=0xf9de7530, ftLastWriteTime.dwHighDateTime=0x1d5ebc8, nFileSizeHigh=0x0, nFileSizeLow=0x15ed5, dwReserved0=0x0, dwReserved1=0x0, cFileName="KbWvD.ots", cAlternateFileName="")) returned 1
	[0107.896] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedf8f870, ftCreationTime.dwHighDateTime=0x1d5e33b, ftLastAccessTime.dwLowDateTime=0x65bbeea0, ftLastAccessTime.dwHighDateTime=0x1d5e0e7, ftLastWriteTime.dwLowDateTime=0x65bbeea0, ftLastWriteTime.dwHighDateTime=0x1d5e0e7, nFileSizeHigh=0x0, nFileSizeLow=0x14993, dwReserved0=0x0, dwReserved1=0x0, cFileName="knA_nHwW5W9.swf", cAlternateFileName="KNA_NH~1.SWF")) returned 1
	[0107.897] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd61850, ftCreationTime.dwHighDateTime=0x1d5e207, ftLastAccessTime.dwLowDateTime=0xb50967f0, ftLastAccessTime.dwHighDateTime=0x1d5eaf4, ftLastWriteTime.dwLowDateTime=0xb50967f0, ftLastWriteTime.dwHighDateTime=0x1d5eaf4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYHaY30ju.odt", cAlternateFileName="LYHAY3~1.ODT")) returned 1
	[0107.897] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418729e0, ftCreationTime.dwHighDateTime=0x1d5e881, ftLastAccessTime.dwLowDateTime=0xf1ea2530, ftLastAccessTime.dwHighDateTime=0x1d5f033, ftLastWriteTime.dwLowDateTime=0xf1ea2530, ftLastWriteTime.dwHighDateTime=0x1d5f033, nFileSizeHigh=0x0, nFileSizeLow=0x2624, dwReserved0=0x0, dwReserved1=0x0, cFileName="mj-_XqsOUTRx7pT0e.jpg", cAlternateFileName="MJ-_XQ~1.JPG")) returned 1
	[0107.897] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84633f90, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0x69907ba0, ftLastAccessTime.dwHighDateTime=0x1d5ed2f, ftLastWriteTime.dwLowDateTime=0x69907ba0, ftLastWriteTime.dwHighDateTime=0x1d5ed2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mm3aHAOeWto", cAlternateFileName="MM3AHA~1")) returned 1
	[0107.897] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6aab60, ftCreationTime.dwHighDateTime=0x1d5e325, ftLastAccessTime.dwLowDateTime=0x4f7b5af0, ftLastAccessTime.dwHighDateTime=0x1d5e811, ftLastWriteTime.dwLowDateTime=0x4f7b5af0, ftLastWriteTime.dwHighDateTime=0x1d5e811, nFileSizeHigh=0x0, nFileSizeLow=0x188f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MNd8.mp3", cAlternateFileName="")) returned 1
	[0107.897] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a99bce0, ftCreationTime.dwHighDateTime=0x1d5e7ac, ftLastAccessTime.dwLowDateTime=0x682cd4f0, ftLastAccessTime.dwHighDateTime=0x1d5e584, ftLastWriteTime.dwLowDateTime=0x682cd4f0, ftLastWriteTime.dwHighDateTime=0x1d5e584, nFileSizeHigh=0x0, nFileSizeLow=0x105a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsCcuUbl0D9hBva9o-Gb.xls", cAlternateFileName="MSCCUU~1.XLS")) returned 1
	[0107.898] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316feea0, ftCreationTime.dwHighDateTime=0x1d5e0d6, ftLastAccessTime.dwLowDateTime=0x169e2b0, ftLastAccessTime.dwHighDateTime=0x1d5ec6b, ftLastWriteTime.dwLowDateTime=0x169e2b0, ftLastWriteTime.dwHighDateTime=0x1d5ec6b, nFileSizeHigh=0x0, nFileSizeLow=0x9feb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngCAG3Lf.m4a", cAlternateFileName="")) returned 1
	[0107.898] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bcdb60, ftCreationTime.dwHighDateTime=0x1d5e1d4, ftLastAccessTime.dwLowDateTime=0x2818d0f0, ftLastAccessTime.dwHighDateTime=0x1d5ecad, ftLastWriteTime.dwLowDateTime=0x2818d0f0, ftLastWriteTime.dwHighDateTime=0x1d5ecad, nFileSizeHigh=0x0, nFileSizeLow=0x8fe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="O6p NRcFtjyQ0R2.mkv", cAlternateFileName="O6PNRC~1.MKV")) returned 1
	[0107.898] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6718d500, ftCreationTime.dwHighDateTime=0x1d5e615, ftLastAccessTime.dwLowDateTime=0x415a8400, ftLastAccessTime.dwHighDateTime=0x1d5ec44, ftLastWriteTime.dwLowDateTime=0x415a8400, ftLastWriteTime.dwHighDateTime=0x1d5ec44, nFileSizeHigh=0x0, nFileSizeLow=0x11484, dwReserved0=0x0, dwReserved1=0x0, cFileName="pJpxx4-5_-Ff-0ern.mp3", cAlternateFileName="PJPXX4~1.MP3")) returned 1
	[0107.898] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa678b9d0, ftCreationTime.dwHighDateTime=0x1d5e774, ftLastAccessTime.dwLowDateTime=0xfd12a7c0, ftLastAccessTime.dwHighDateTime=0x1d5eb10, ftLastWriteTime.dwLowDateTime=0xfd12a7c0, ftLastWriteTime.dwHighDateTime=0x1d5eb10, nFileSizeHigh=0x0, nFileSizeLow=0x13a05, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPBZxZ.mkv", cAlternateFileName="")) returned 1
	[0107.899] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5712e40, ftCreationTime.dwHighDateTime=0x1d5e39e, ftLastAccessTime.dwLowDateTime=0xeb29bbf0, ftLastAccessTime.dwHighDateTime=0x1d5efa9, ftLastWriteTime.dwLowDateTime=0xeb29bbf0, ftLastWriteTime.dwHighDateTime=0x1d5efa9, nFileSizeHigh=0x0, nFileSizeLow=0x94e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="pZpfWsYWRe.pdf", cAlternateFileName="PZPFWS~1.PDF")) returned 1
	[0107.899] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1662d720, ftCreationTime.dwHighDateTime=0x1d5eff5, ftLastAccessTime.dwLowDateTime=0x7eff8b50, ftLastAccessTime.dwHighDateTime=0x1d5e11f, ftLastWriteTime.dwLowDateTime=0x7eff8b50, ftLastWriteTime.dwHighDateTime=0x1d5e11f, nFileSizeHigh=0x0, nFileSizeLow=0x16191, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q2k R_LJCrLq0.bmp", cAlternateFileName="Q2KR_L~1.BMP")) returned 1
	[0107.899] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94a7b240, ftCreationTime.dwHighDateTime=0x1d5eebf, ftLastAccessTime.dwLowDateTime=0xbe0d9f80, ftLastAccessTime.dwHighDateTime=0x1d5eba6, ftLastWriteTime.dwLowDateTime=0xbe0d9f80, ftLastWriteTime.dwHighDateTime=0x1d5eba6, nFileSizeHigh=0x0, nFileSizeLow=0xbee5, dwReserved0=0x0, dwReserved1=0x0, cFileName="wbD6Jpp1VpuBL6f.pdf", cAlternateFileName="WBD6JP~1.PDF")) returned 1
	[0107.899] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1811130, ftCreationTime.dwHighDateTime=0x1d5e252, ftLastAccessTime.dwLowDateTime=0xe9a671a0, ftLastAccessTime.dwHighDateTime=0x1d5f0f9, ftLastWriteTime.dwLowDateTime=0xe9a671a0, ftLastWriteTime.dwHighDateTime=0x1d5f0f9, nFileSizeHigh=0x0, nFileSizeLow=0x18ed7, dwReserved0=0x0, dwReserved1=0x0, cFileName="XnZS-qtTFQpWGv.swf", cAlternateFileName="XNZS-Q~1.SWF")) returned 1
	[0107.900] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee8c680, ftCreationTime.dwHighDateTime=0x1d5e2b5, ftLastAccessTime.dwLowDateTime=0xa00581c0, ftLastAccessTime.dwHighDateTime=0x1d5ec72, ftLastWriteTime.dwLowDateTime=0xa00581c0, ftLastWriteTime.dwHighDateTime=0x1d5ec72, nFileSizeHigh=0x0, nFileSizeLow=0x6e86, dwReserved0=0x0, dwReserved1=0x0, cFileName="YENM3XHoRa 9Bl8.avi", cAlternateFileName="YENM3X~1.AVI")) returned 1
	[0107.900] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8574a50, ftCreationTime.dwHighDateTime=0x1d5e16c, ftLastAccessTime.dwLowDateTime=0x338539c0, ftLastAccessTime.dwHighDateTime=0x1d5e4aa, ftLastWriteTime.dwLowDateTime=0x338539c0, ftLastWriteTime.dwHighDateTime=0x1d5e4aa, nFileSizeHigh=0x0, nFileSizeLow=0xfc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="yJZvE.ots", cAlternateFileName="")) returned 1
	[0107.900] FindNextFileW (in: hFindFile=0xd9d080, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8574a50, ftCreationTime.dwHighDateTime=0x1d5e16c, ftLastAccessTime.dwLowDateTime=0x338539c0, ftLastAccessTime.dwHighDateTime=0x1d5e4aa, ftLastWriteTime.dwLowDateTime=0x338539c0, ftLastWriteTime.dwHighDateTime=0x1d5e4aa, nFileSizeHigh=0x0, nFileSizeLow=0xfc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="yJZvE.ots", cAlternateFileName="")) returned 0
	[0107.900] FindClose (in: hFindFile=0xd9d080 | out: hFindFile=0xd9d080) returned 1
	[0107.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0107.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0107.917] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0107.917] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv", lpFilePart=0x0) returned 0x2a
	[0107.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0107.917] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\-uinr9tb1ihsrj.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x354
	[0107.917] GetFileType (hFile=0x354) returned 0x1
	[0107.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0107.917] GetFileType (hFile=0x354) returned 0x1
	[0107.917] GetFileSize (in: hFile=0x354, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x12ab7
	[0107.919] ReadFile (in: hFile=0x354, lpBuffer=0x292a674, nNumberOfBytesToRead=0x12ab7, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x292a674*, lpNumberOfBytesRead=0xafe99c*=0x12ab7, lpOverlapped=0x0) returned 1
	[0107.920] CloseHandle (hObject=0x354) returned 1
	[0115.422] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44
	[0115.423] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x44, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43
	[0115.423] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44
	[0115.423] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x44, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43
	[0115.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe85c) returned 1
	[0115.439] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0xafe8d8 | out: lpFileInformation=0xafe8d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0115.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe858) returned 1
	[0115.810] BCryptGetFipsAlgorithmMode (in: pfEnabled=0xafe7b4 | out: pfEnabled=0xafe7b4) returned 0x0
	[0117.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0117.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0117.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0117.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0117.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0117.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0117.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv", lpFilePart=0x0) returned 0x2a
	[0117.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0117.221] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\-uinr9tb1ihsrj.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404
	[0117.224] GetFileType (hFile=0x404) returned 0x1
	[0117.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0117.224] GetFileType (hFile=0x404) returned 0x1
	[0117.268] WriteFile (in: hFile=0x404, lpBuffer=0x29d97b4*, nNumberOfBytesToWrite=0x12ac0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x29d97b4*, lpNumberOfBytesWritten=0xafe990*=0x12ac0, lpOverlapped=0x0) returned 1
	[0117.270] CloseHandle (hObject=0x404) returned 1
	[0117.314] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0117.314] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv", lpFilePart=0x0) returned 0x2a
	[0117.314] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0117.314] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv.rogue", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv.rogue", lpFilePart=0x0) returned 0x30
	[0117.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0117.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\-uinr9tb1ihsrj.csv"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fb5760, ftCreationTime.dwHighDateTime=0x1d5eea7, ftLastAccessTime.dwLowDateTime=0x34319930, ftLastAccessTime.dwHighDateTime=0x1d5e785, ftLastWriteTime.dwLowDateTime=0xa72a060b, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0)) returned 1
	[0117.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0117.315] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\-uinr9tb1ihsrj.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\-UiNR9TB1IHsrJ.csv.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\-uinr9tb1ihsrj.csv.rogue")) returned 1
	[0117.362] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0117.362] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg", lpFilePart=0x0) returned 0x2c
	[0117.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0117.362] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\1x 7hemppq80rc57.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404
	[0117.363] GetFileType (hFile=0x404) returned 0x1
	[0117.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0117.363] GetFileType (hFile=0x404) returned 0x1
	[0117.363] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x16233
	[0117.363] ReadFile (in: hFile=0x404, lpBuffer=0x3942f50, nNumberOfBytesToRead=0x16233, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x3942f50*, lpNumberOfBytesRead=0xafe99c*=0x16233, lpOverlapped=0x0) returned 1
	[0117.365] CloseHandle (hObject=0x404) returned 1
	[0117.493] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0117.493] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0117.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0117.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0117.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0117.493] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0117.493] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg", lpFilePart=0x0) returned 0x2c
	[0117.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0117.493] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\1x 7hemppq80rc57.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404
	[0117.497] GetFileType (hFile=0x404) returned 0x1
	[0117.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0117.497] GetFileType (hFile=0x404) returned 0x1
	[0117.497] WriteFile (in: hFile=0x404, lpBuffer=0x39b1ac0*, nNumberOfBytesToWrite=0x16240, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x39b1ac0*, lpNumberOfBytesWritten=0xafe990*=0x16240, lpOverlapped=0x0) returned 1
	[0117.500] CloseHandle (hObject=0x404) returned 1
	[0117.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0117.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg", lpFilePart=0x0) returned 0x2c
	[0117.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33
	[0117.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg.rogue", nBufferLength=0x33, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg.rogue", lpFilePart=0x0) returned 0x32
	[0117.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0117.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\1x 7hemppq80rc57.jpg"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd02a1420, ftCreationTime.dwHighDateTime=0x1d5e18b, ftLastAccessTime.dwLowDateTime=0x3b1551a0, ftLastAccessTime.dwHighDateTime=0x1d5e31c, ftLastWriteTime.dwLowDateTime=0xa74e7736, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x16240)) returned 1
	[0117.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0117.550] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\1x 7hemppq80rc57.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\1x 7HEmPpq80rc57.jpg.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\1x 7hemppq80rc57.jpg.rogue")) returned 1
	[0117.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0117.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3", lpFilePart=0x0) returned 0x2b
	[0117.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0117.592] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\4j6zdyfiwuadixo.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404
	[0117.592] GetFileType (hFile=0x404) returned 0x1
	[0117.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0117.592] GetFileType (hFile=0x404) returned 0x1
	[0117.592] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0xae9e
	[0117.593] ReadFile (in: hFile=0x404, lpBuffer=0x2a39564, nNumberOfBytesToRead=0xae9e, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a39564*, lpNumberOfBytesRead=0xafe99c*=0xae9e, lpOverlapped=0x0) returned 1
	[0117.594] CloseHandle (hObject=0x404) returned 1
	[0117.759] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0117.759] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0117.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0117.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0117.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0117.760] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0117.760] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3", lpFilePart=0x0) returned 0x2b
	[0117.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0117.760] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\4j6zdyfiwuadixo.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404
	[0117.769] GetFileType (hFile=0x404) returned 0x1
	[0117.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0117.769] GetFileType (hFile=0x404) returned 0x1
	[0117.769] WriteFile (in: hFile=0x404, lpBuffer=0x2aa6f44*, nNumberOfBytesToWrite=0xaea0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2aa6f44*, lpNumberOfBytesWritten=0xafe990*=0xaea0, lpOverlapped=0x0) returned 1
	[0117.771] CloseHandle (hObject=0x404) returned 1
	[0117.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0117.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3", lpFilePart=0x0) returned 0x2b
	[0117.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0117.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3.rogue", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3.rogue", lpFilePart=0x0) returned 0x31
	[0117.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0117.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\4j6zdyfiwuadixo.mp3"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe055da40, ftCreationTime.dwHighDateTime=0x1d5e6f0, ftLastAccessTime.dwLowDateTime=0x65897e80, ftLastAccessTime.dwHighDateTime=0x1d5ecd0, ftLastWriteTime.dwLowDateTime=0xa77650e1, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xaea0)) returned 1
	[0117.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0117.852] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\4j6zdyfiwuadixo.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\4j6zdyfIWuAdIxo.mp3.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\4j6zdyfiwuadixo.mp3.rogue")) returned 1
	[0117.860] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25
	[0117.860] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg", nBufferLength=0x25, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg", lpFilePart=0x0) returned 0x24
	[0117.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0117.860] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\5ju36f9c.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404
	[0117.860] GetFileType (hFile=0x404) returned 0x1
	[0117.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0117.860] GetFileType (hFile=0x404) returned 0x1
	[0117.861] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x694a
	[0117.861] ReadFile (in: hFile=0x404, lpBuffer=0x2ab204c, nNumberOfBytesToRead=0x694a, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2ab204c*, lpNumberOfBytesRead=0xafe99c*=0x694a, lpOverlapped=0x0) returned 1
	[0117.862] CloseHandle (hObject=0x404) returned 1
	[0118.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0118.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0118.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0118.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0118.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0118.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25
	[0118.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg", nBufferLength=0x25, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg", lpFilePart=0x0) returned 0x24
	[0118.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0118.040] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\5ju36f9c.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0118.059] GetFileType (hFile=0x2cc) returned 0x1
	[0118.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0118.059] GetFileType (hFile=0x2cc) returned 0x1
	[0118.059] WriteFile (in: hFile=0x2cc, lpBuffer=0x2951408*, nNumberOfBytesToWrite=0x6950, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2951408*, lpNumberOfBytesWritten=0xafe990*=0x6950, lpOverlapped=0x0) returned 1
	[0118.060] CloseHandle (hObject=0x2cc) returned 1
	[0118.063] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25
	[0118.063] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg", nBufferLength=0x25, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg", lpFilePart=0x0) returned 0x24
	[0118.063] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0118.064] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg.rogue", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg.rogue", lpFilePart=0x0) returned 0x2a
	[0118.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0118.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\5ju36f9c.jpg"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda697d70, ftCreationTime.dwHighDateTime=0x1d5e282, ftLastAccessTime.dwLowDateTime=0x7959200, ftLastAccessTime.dwHighDateTime=0x1d5e51e, ftLastWriteTime.dwLowDateTime=0xa7a14493, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x6950)) returned 1
	[0118.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0118.064] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\5ju36f9c.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\5ju36F9C.jpg.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\5ju36f9c.jpg.rogue")) returned 1
	[0118.066] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0118.066] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi", lpFilePart=0x0) returned 0x2e
	[0118.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0118.066] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\5yz93b622bsprnho9w.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0118.067] GetFileType (hFile=0x2cc) returned 0x1
	[0118.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0118.067] GetFileType (hFile=0x2cc) returned 0x1
	[0118.067] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0xd5ba
	[0118.067] ReadFile (in: hFile=0x2cc, lpBuffer=0x2957fbc, nNumberOfBytesToRead=0xd5ba, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2957fbc*, lpNumberOfBytesRead=0xafe99c*=0xd5ba, lpOverlapped=0x0) returned 1
	[0118.068] CloseHandle (hObject=0x2cc) returned 1
	[0118.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0118.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0118.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0118.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0118.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0118.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0118.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi", lpFilePart=0x0) returned 0x2e
	[0118.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0118.133] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\5yz93b622bsprnho9w.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0118.137] GetFileType (hFile=0x2cc) returned 0x1
	[0118.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0118.137] GetFileType (hFile=0x2cc) returned 0x1
	[0118.137] WriteFile (in: hFile=0x2cc, lpBuffer=0x29cd058*, nNumberOfBytesToWrite=0xd5c0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x29cd058*, lpNumberOfBytesWritten=0xafe990*=0xd5c0, lpOverlapped=0x0) returned 1
	[0118.150] CloseHandle (hObject=0x2cc) returned 1
	[0118.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0118.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi", lpFilePart=0x0) returned 0x2e
	[0118.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0118.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi.rogue", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi.rogue", lpFilePart=0x0) returned 0x34
	[0118.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0118.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\5yz93b622bsprnho9w.avi"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3be760, ftCreationTime.dwHighDateTime=0x1d5ee2e, ftLastAccessTime.dwLowDateTime=0x4f346570, ftLastAccessTime.dwHighDateTime=0x1d5e896, ftLastWriteTime.dwLowDateTime=0xa7af89a6, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xd5c0)) returned 1
	[0118.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0118.157] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\5yz93b622bsprnho9w.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\5yz93b622bSpRnho9w.avi.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\5yz93b622bsprnho9w.avi.rogue")) returned 1
	[0118.159] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29
	[0118.159] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi", nBufferLength=0x29, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi", lpFilePart=0x0) returned 0x28
	[0118.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0118.159] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\b1gx75lqibl3.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0118.159] GetFileType (hFile=0x2cc) returned 0x1
	[0118.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0118.160] GetFileType (hFile=0x2cc) returned 0x1
	[0118.160] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0xc7c4
	[0118.160] ReadFile (in: hFile=0x2cc, lpBuffer=0x29da898, nNumberOfBytesToRead=0xc7c4, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x29da898*, lpNumberOfBytesRead=0xafe99c*=0xc7c4, lpOverlapped=0x0) returned 1
	[0118.160] CloseHandle (hObject=0x2cc) returned 1
	[0118.279] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0118.279] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0118.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0118.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0118.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0118.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29
	[0118.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi", nBufferLength=0x29, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi", lpFilePart=0x0) returned 0x28
	[0118.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0118.280] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\b1gx75lqibl3.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0118.282] GetFileType (hFile=0x2cc) returned 0x1
	[0118.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0118.282] GetFileType (hFile=0x2cc) returned 0x1
	[0118.282] WriteFile (in: hFile=0x2cc, lpBuffer=0x2a4ce04*, nNumberOfBytesToWrite=0xc7d0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a4ce04*, lpNumberOfBytesWritten=0xafe990*=0xc7d0, lpOverlapped=0x0) returned 1
	[0118.284] CloseHandle (hObject=0x2cc) returned 1
	[0118.289] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29
	[0118.289] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi", nBufferLength=0x29, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi", lpFilePart=0x0) returned 0x28
	[0118.289] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0118.289] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi.rogue", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi.rogue", lpFilePart=0x0) returned 0x2e
	[0118.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0118.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\b1gx75lqibl3.avi"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38aaf50, ftCreationTime.dwHighDateTime=0x1d5ea88, ftLastAccessTime.dwLowDateTime=0x4e5e8660, ftLastAccessTime.dwHighDateTime=0x1d5e118, ftLastWriteTime.dwLowDateTime=0xa7c3d601, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xc7d0)) returned 1
	[0118.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0118.290] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\b1gx75lqibl3.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\b1Gx75LQIbL3.avi.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\b1gx75lqibl3.avi.rogue")) returned 1
	[0118.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0118.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf", lpFilePart=0x0) returned 0x30
	[0118.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0118.292] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\c3pp9q0njjqzz68vcjxq.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0118.292] GetFileType (hFile=0x2cc) returned 0x1
	[0118.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0118.292] GetFileType (hFile=0x2cc) returned 0x1
	[0118.292] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x1870d
	[0118.294] ReadFile (in: hFile=0x2cc, lpBuffer=0x3a11580, nNumberOfBytesToRead=0x1870d, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x3a11580*, lpNumberOfBytesRead=0xafe99c*=0x1870d, lpOverlapped=0x0) returned 1
	[0118.297] CloseHandle (hObject=0x2cc) returned 1
	[0118.397] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0118.397] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0118.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0118.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0118.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0118.398] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0118.398] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf", lpFilePart=0x0) returned 0x30
	[0118.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0118.398] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\c3pp9q0njjqzz68vcjxq.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0118.400] GetFileType (hFile=0x2cc) returned 0x1
	[0118.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0118.400] GetFileType (hFile=0x2cc) returned 0x1
	[0118.400] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a8b910*, nNumberOfBytesToWrite=0x18710, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x3a8b910*, lpNumberOfBytesWritten=0xafe990*=0x18710, lpOverlapped=0x0) returned 1
	[0118.404] CloseHandle (hObject=0x2cc) returned 1
	[0118.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0118.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf", lpFilePart=0x0) returned 0x30
	[0118.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37
	[0118.412] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf.rogue", nBufferLength=0x37, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf.rogue", lpFilePart=0x0) returned 0x36
	[0118.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0118.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\c3pp9q0njjqzz68vcjxq.pdf"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9e3b130, ftCreationTime.dwHighDateTime=0x1d5ec7e, ftLastAccessTime.dwLowDateTime=0xea601430, ftLastAccessTime.dwHighDateTime=0x1d5e6b2, ftLastWriteTime.dwLowDateTime=0xa7d6eb29, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x18710)) returned 1
	[0118.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0118.412] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\c3pp9q0njjqzz68vcjxq.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\C3PP9q0NJjQZz68vcJxQ.pdf.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\c3pp9q0njjqzz68vcjxq.pdf.rogue")) returned 1
	[0118.413] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0118.413] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3", lpFilePart=0x0) returned 0x26
	[0118.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0118.414] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\c8llirwchw.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0118.414] GetFileType (hFile=0x2cc) returned 0x1
	[0118.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0118.414] GetFileType (hFile=0x2cc) returned 0x1
	[0118.414] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x10c9b
	[0118.414] ReadFile (in: hFile=0x2cc, lpBuffer=0x2aa68c0, nNumberOfBytesToRead=0x10c9b, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2aa68c0*, lpNumberOfBytesRead=0xafe99c*=0x10c9b, lpOverlapped=0x0) returned 1
	[0118.415] CloseHandle (hObject=0x2cc) returned 1
	[0118.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0118.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0118.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0118.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0118.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0118.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0118.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3", lpFilePart=0x0) returned 0x26
	[0118.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0118.543] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\c8llirwchw.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0118.545] GetFileType (hFile=0x2cc) returned 0x1
	[0118.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0118.545] GetFileType (hFile=0x2cc) returned 0x1
	[0118.545] WriteFile (in: hFile=0x2cc, lpBuffer=0x2b25ca0*, nNumberOfBytesToWrite=0x10ca0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2b25ca0*, lpNumberOfBytesWritten=0xafe990*=0x10ca0, lpOverlapped=0x0) returned 1
	[0118.547] CloseHandle (hObject=0x2cc) returned 1
	[0118.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0118.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3", lpFilePart=0x0) returned 0x26
	[0118.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0118.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3.rogue", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3.rogue", lpFilePart=0x0) returned 0x2c
	[0118.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0118.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\c8llirwchw.mp3"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d331e0, ftCreationTime.dwHighDateTime=0x1d5e227, ftLastAccessTime.dwLowDateTime=0xf3396d20, ftLastAccessTime.dwHighDateTime=0x1d5e330, ftLastWriteTime.dwLowDateTime=0xa7ec6128, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x10ca0)) returned 1
	[0118.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0118.550] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\c8llirwchw.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\C8lLIrwchw.mp3.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\c8llirwchw.mp3.rogue")) returned 1
	[0118.551] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23
	[0118.551] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls", nBufferLength=0x23, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls", lpFilePart=0x0) returned 0x22
	[0118.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0118.551] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\d0pi2c.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0118.551] GetFileType (hFile=0x2cc) returned 0x1
	[0118.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0118.551] GetFileType (hFile=0x2cc) returned 0x1
	[0118.551] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x17a16
	[0118.552] ReadFile (in: hFile=0x2cc, lpBuffer=0x3ac5980, nNumberOfBytesToRead=0x17a16, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x3ac5980*, lpNumberOfBytesRead=0xafe99c*=0x17a16, lpOverlapped=0x0) returned 1
	[0118.554] CloseHandle (hObject=0x2cc) returned 1
	[0118.726] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0118.727] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0118.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0118.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0118.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0118.727] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23
	[0118.727] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls", nBufferLength=0x23, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls", lpFilePart=0x0) returned 0x22
	[0118.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0118.727] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\d0pi2c.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0118.738] GetFileType (hFile=0x2cc) returned 0x1
	[0118.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0118.738] GetFileType (hFile=0x2cc) returned 0x1
	[0118.738] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b3bc58*, nNumberOfBytesToWrite=0x17a20, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x3b3bc58*, lpNumberOfBytesWritten=0xafe990*=0x17a20, lpOverlapped=0x0) returned 1
	[0118.741] CloseHandle (hObject=0x2cc) returned 1
	[0118.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23
	[0118.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls", nBufferLength=0x23, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls", lpFilePart=0x0) returned 0x22
	[0118.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29
	[0118.746] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls.rogue", nBufferLength=0x29, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls.rogue", lpFilePart=0x0) returned 0x28
	[0118.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0118.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\d0pi2c.xls"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26963c00, ftCreationTime.dwHighDateTime=0x1d5e19e, ftLastAccessTime.dwLowDateTime=0x19bdb1f0, ftLastAccessTime.dwHighDateTime=0x1d5e1ff, ftLastWriteTime.dwLowDateTime=0xa80b87d9, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x17a20)) returned 1
	[0118.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0118.746] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\d0pi2c.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\d0pi2c.xls.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\d0pi2c.xls.rogue")) returned 1
	[0118.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0118.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4", lpFilePart=0x0) returned 0x2d
	[0118.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0118.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\e5x7t 1vgfzzn2ole.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0118.747] GetFileType (hFile=0x2cc) returned 0x1
	[0118.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0118.748] GetFileType (hFile=0x2cc) returned 0x1
	[0118.748] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x15584
	[0118.749] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b53698, nNumberOfBytesToRead=0x15584, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x3b53698*, lpNumberOfBytesRead=0xafe99c*=0x15584, lpOverlapped=0x0) returned 1
	[0118.752] CloseHandle (hObject=0x2cc) returned 1
	[0119.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0119.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0119.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0119.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0119.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0119.023] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0119.023] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4", lpFilePart=0x0) returned 0x2d
	[0119.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0119.023] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\e5x7t 1vgfzzn2ole.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0119.025] GetFileType (hFile=0x2cc) returned 0x1
	[0119.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0119.025] GetFileType (hFile=0x2cc) returned 0x1
	[0119.025] WriteFile (in: hFile=0x2cc, lpBuffer=0x3bbe298*, nNumberOfBytesToWrite=0x15590, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x3bbe298*, lpNumberOfBytesWritten=0xafe990*=0x15590, lpOverlapped=0x0) returned 1
	[0119.086] CloseHandle (hObject=0x2cc) returned 1
	[0119.090] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0119.090] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4", lpFilePart=0x0) returned 0x2d
	[0119.090] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0119.090] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4.rogue", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4.rogue", lpFilePart=0x0) returned 0x33
	[0119.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0119.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\e5x7t 1vgfzzn2ole.mp4"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bb1490, ftCreationTime.dwHighDateTime=0x1d5ef95, ftLastAccessTime.dwLowDateTime=0x4090000, ftLastAccessTime.dwHighDateTime=0x1d5e6b7, ftLastWriteTime.dwLowDateTime=0xa83fd31e, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x15590)) returned 1
	[0119.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0119.091] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\e5x7t 1vgfzzn2ole.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\E5x7t 1VGFZzn2OlE.mp4.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\e5x7t 1vgfzzn2ole.mp4.rogue")) returned 1
	[0119.091] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0119.092] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3", lpFilePart=0x0) returned 0x2c
	[0119.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0119.092] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\f_rpynskdxlr42xr.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0119.092] GetFileType (hFile=0x2cc) returned 0x1
	[0119.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0119.092] GetFileType (hFile=0x2cc) returned 0x1
	[0119.092] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x17a80
	[0119.161] ReadFile (in: hFile=0x2cc, lpBuffer=0x38d94c8, nNumberOfBytesToRead=0x17a80, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x38d94c8*, lpNumberOfBytesRead=0xafe99c*=0x17a80, lpOverlapped=0x0) returned 1
	[0119.162] CloseHandle (hObject=0x2cc) returned 1
	[0119.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0119.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0119.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0119.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0119.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0119.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0119.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3", lpFilePart=0x0) returned 0x2c
	[0119.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0119.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\f_rpynskdxlr42xr.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0119.253] GetFileType (hFile=0x2cc) returned 0x1
	[0119.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0119.253] GetFileType (hFile=0x2cc) returned 0x1
	[0119.253] WriteFile (in: hFile=0x2cc, lpBuffer=0x397c430*, nNumberOfBytesToWrite=0x17a90, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x397c430*, lpNumberOfBytesWritten=0xafe990*=0x17a90, lpOverlapped=0x0) returned 1
	[0119.255] CloseHandle (hObject=0x2cc) returned 1
	[0119.258] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0119.258] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3", lpFilePart=0x0) returned 0x2c
	[0119.258] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33
	[0119.258] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3.rogue", nBufferLength=0x33, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3.rogue", lpFilePart=0x0) returned 0x32
	[0119.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0119.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\f_rpynskdxlr42xr.mp3"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10becb90, ftCreationTime.dwHighDateTime=0x1d5edc4, ftLastAccessTime.dwLowDateTime=0x4e438a00, ftLastAccessTime.dwHighDateTime=0x1d5ebfd, ftLastWriteTime.dwLowDateTime=0xa857a779, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x17a90)) returned 1
	[0119.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0119.259] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\f_rpynskdxlr42xr.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\F_rpYNSkdXLR42Xr.mp3.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\f_rpynskdxlr42xr.mp3.rogue")) returned 1
	[0119.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0119.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt", lpFilePart=0x0) returned 0x27
	[0119.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0119.259] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\jz9kqhlxfnp.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0119.308] GetFileType (hFile=0x2cc) returned 0x1
	[0119.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0119.308] GetFileType (hFile=0x2cc) returned 0x1
	[0119.308] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0xc138
	[0119.308] ReadFile (in: hFile=0x2cc, lpBuffer=0x2948654, nNumberOfBytesToRead=0xc138, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2948654*, lpNumberOfBytesRead=0xafe99c*=0xc138, lpOverlapped=0x0) returned 1
	[0119.309] CloseHandle (hObject=0x2cc) returned 1
	[0119.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0119.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0119.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0119.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0119.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0119.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0119.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt", lpFilePart=0x0) returned 0x27
	[0119.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0119.422] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\jz9kqhlxfnp.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0119.424] GetFileType (hFile=0x2cc) returned 0x1
	[0119.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0119.424] GetFileType (hFile=0x2cc) returned 0x1
	[0119.424] WriteFile (in: hFile=0x2cc, lpBuffer=0x29b9810*, nNumberOfBytesToWrite=0xc140, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x29b9810*, lpNumberOfBytesWritten=0xafe990*=0xc140, lpOverlapped=0x0) returned 1
	[0119.426] CloseHandle (hObject=0x2cc) returned 1
	[0119.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0119.429] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt", lpFilePart=0x0) returned 0x27
	[0119.429] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0119.429] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt.rogue", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt.rogue", lpFilePart=0x0) returned 0x2d
	[0119.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0119.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\jz9kqhlxfnp.odt"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937a1950, ftCreationTime.dwHighDateTime=0x1d5e65c, ftLastAccessTime.dwLowDateTime=0x383473e0, ftLastAccessTime.dwHighDateTime=0x1d5e9e2, ftLastWriteTime.dwLowDateTime=0xa871e29e, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xc140)) returned 1
	[0119.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0119.429] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\jz9kqhlxfnp.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JZ9KqhlxFnP.odt.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\jz9kqhlxfnp.odt.rogue")) returned 1
	[0119.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26
	[0119.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt", nBufferLength=0x26, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt", lpFilePart=0x0) returned 0x25
	[0119.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0119.430] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\lyhay30ju.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0119.430] GetFileType (hFile=0x2cc) returned 0x1
	[0119.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0119.430] GetFileType (hFile=0x2cc) returned 0x1
	[0119.430] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x8ff0
	[0119.430] ReadFile (in: hFile=0x2cc, lpBuffer=0x29c5bd8, nNumberOfBytesToRead=0x8ff0, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x29c5bd8*, lpNumberOfBytesRead=0xafe99c*=0x8ff0, lpOverlapped=0x0) returned 1
	[0119.431] CloseHandle (hObject=0x2cc) returned 1
	[0119.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0119.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0119.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0119.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0119.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0119.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26
	[0119.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt", nBufferLength=0x26, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt", lpFilePart=0x0) returned 0x25
	[0119.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0119.590] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\lyhay30ju.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0119.592] GetFileType (hFile=0x2cc) returned 0x1
	[0119.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0119.592] GetFileType (hFile=0x2cc) returned 0x1
	[0119.592] WriteFile (in: hFile=0x2cc, lpBuffer=0x2a3f9c0*, nNumberOfBytesToWrite=0x9000, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a3f9c0*, lpNumberOfBytesWritten=0xafe990*=0x9000, lpOverlapped=0x0) returned 1
	[0119.593] CloseHandle (hObject=0x2cc) returned 1
	[0119.595] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26
	[0119.595] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt", nBufferLength=0x26, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt", lpFilePart=0x0) returned 0x25
	[0119.595] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0119.595] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt.rogue", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt.rogue", lpFilePart=0x0) returned 0x2b
	[0119.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0119.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\lyhay30ju.odt"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd61850, ftCreationTime.dwHighDateTime=0x1d5e207, ftLastAccessTime.dwLowDateTime=0xb50967f0, ftLastAccessTime.dwHighDateTime=0x1d5eaf4, ftLastWriteTime.dwLowDateTime=0xa88c42d9, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x9000)) returned 1
	[0119.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0119.595] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\lyhay30ju.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\LYHaY30ju.odt.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\lyhay30ju.odt.rogue")) returned 1
	[0119.596] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0119.596] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg", lpFilePart=0x0) returned 0x2d
	[0119.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0119.596] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\mj-_xqsoutrx7pt0e.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0119.596] GetFileType (hFile=0x2cc) returned 0x1
	[0119.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0119.596] GetFileType (hFile=0x2cc) returned 0x1
	[0119.596] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x2624
	[0119.596] ReadFile (in: hFile=0x2cc, lpBuffer=0x2a48c20, nNumberOfBytesToRead=0x2624, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a48c20*, lpNumberOfBytesRead=0xafe99c*=0x2624, lpOverlapped=0x0) returned 1
	[0119.597] CloseHandle (hObject=0x2cc) returned 1
	[0119.788] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0119.788] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0119.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0119.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0119.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0119.788] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0119.789] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg", lpFilePart=0x0) returned 0x2d
	[0119.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0119.789] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\mj-_xqsoutrx7pt0e.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0119.790] GetFileType (hFile=0x2cc) returned 0x1
	[0119.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0119.790] GetFileType (hFile=0x2cc) returned 0x1
	[0119.790] WriteFile (in: hFile=0x2cc, lpBuffer=0x2aa18f8*, nNumberOfBytesToWrite=0x2630, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2aa18f8*, lpNumberOfBytesWritten=0xafe990*=0x2630, lpOverlapped=0x0) returned 1
	[0119.791] CloseHandle (hObject=0x2cc) returned 1
	[0119.792] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0119.792] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg", lpFilePart=0x0) returned 0x2d
	[0119.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0119.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg.rogue", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg.rogue", lpFilePart=0x0) returned 0x33
	[0119.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0119.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\mj-_xqsoutrx7pt0e.jpg"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418729e0, ftCreationTime.dwHighDateTime=0x1d5e881, ftLastAccessTime.dwLowDateTime=0xf1ea2530, ftLastAccessTime.dwHighDateTime=0x1d5f033, ftLastWriteTime.dwLowDateTime=0xa8a8e8ad, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x2630)) returned 1
	[0119.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0119.793] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\mj-_xqsoutrx7pt0e.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\mj-_XqsOUTRx7pT0e.jpg.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\mj-_xqsoutrx7pt0e.jpg.rogue")) returned 1
	[0119.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x21
	[0119.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3", nBufferLength=0x21, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3", lpFilePart=0x0) returned 0x20
	[0119.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0119.794] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\mnd8.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0119.794] GetFileType (hFile=0x2cc) returned 0x1
	[0119.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0119.794] GetFileType (hFile=0x2cc) returned 0x1
	[0119.794] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x188f2
	[0119.795] ReadFile (in: hFile=0x2cc, lpBuffer=0x39ac160, nNumberOfBytesToRead=0x188f2, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x39ac160*, lpNumberOfBytesRead=0xafe99c*=0x188f2, lpOverlapped=0x0) returned 1
	[0119.797] CloseHandle (hObject=0x2cc) returned 1
	[0119.890] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0119.890] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0119.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0119.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0119.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0119.890] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x21
	[0119.890] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3", nBufferLength=0x21, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3", lpFilePart=0x0) returned 0x20
	[0119.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0119.891] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\mnd8.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0119.892] GetFileType (hFile=0x2cc) returned 0x1
	[0119.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0119.892] GetFileType (hFile=0x2cc) returned 0x1
	[0119.892] WriteFile (in: hFile=0x2cc, lpBuffer=0x3a26e90*, nNumberOfBytesToWrite=0x18900, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x3a26e90*, lpNumberOfBytesWritten=0xafe990*=0x18900, lpOverlapped=0x0) returned 1
	[0119.895] CloseHandle (hObject=0x2cc) returned 1
	[0119.897] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x21
	[0119.898] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3", nBufferLength=0x21, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3", lpFilePart=0x0) returned 0x20
	[0119.898] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0119.898] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3.rogue", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3.rogue", lpFilePart=0x0) returned 0x26
	[0119.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0119.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\mnd8.mp3"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6aab60, ftCreationTime.dwHighDateTime=0x1d5e325, ftLastAccessTime.dwLowDateTime=0x4f7b5af0, ftLastAccessTime.dwHighDateTime=0x1d5e811, ftLastWriteTime.dwLowDateTime=0xa8b9996c, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x18900)) returned 1
	[0119.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0119.898] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\mnd8.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\MNd8.mp3.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\mnd8.mp3.rogue")) returned 1
	[0119.898] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0119.899] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls", lpFilePart=0x0) returned 0x30
	[0119.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0119.899] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\msccuubl0d9hbva9o-gb.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0119.899] GetFileType (hFile=0x2cc) returned 0x1
	[0119.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0119.899] GetFileType (hFile=0x2cc) returned 0x1
	[0119.899] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x105a7
	[0119.899] ReadFile (in: hFile=0x2cc, lpBuffer=0x2af11e4, nNumberOfBytesToRead=0x105a7, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2af11e4*, lpNumberOfBytesRead=0xafe99c*=0x105a7, lpOverlapped=0x0) returned 1
	[0119.900] CloseHandle (hObject=0x2cc) returned 1
	[0120.504] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0120.504] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0120.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0120.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0120.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0120.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0120.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls", lpFilePart=0x0) returned 0x30
	[0120.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0120.505] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\msccuubl0d9hbva9o-gb.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0120.507] GetFileType (hFile=0x2cc) returned 0x1
	[0120.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0120.507] GetFileType (hFile=0x2cc) returned 0x1
	[0120.507] WriteFile (in: hFile=0x2cc, lpBuffer=0x2978c94*, nNumberOfBytesToWrite=0x105b0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2978c94*, lpNumberOfBytesWritten=0xafe990*=0x105b0, lpOverlapped=0x0) returned 1
	[0120.509] CloseHandle (hObject=0x2cc) returned 1
	[0120.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0120.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls", lpFilePart=0x0) returned 0x30
	[0120.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37
	[0120.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls.rogue", nBufferLength=0x37, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls.rogue", lpFilePart=0x0) returned 0x36
	[0120.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0120.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\msccuubl0d9hbva9o-gb.xls"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a99bce0, ftCreationTime.dwHighDateTime=0x1d5e7ac, ftLastAccessTime.dwLowDateTime=0x682cd4f0, ftLastAccessTime.dwHighDateTime=0x1d5e584, ftLastWriteTime.dwLowDateTime=0xa919b87c, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x105b0)) returned 1
	[0120.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0120.554] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\msccuubl0d9hbva9o-gb.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\MsCcuUbl0D9hBva9o-Gb.xls.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\msccuubl0d9hbva9o-gb.xls.rogue")) returned 1
	[0120.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0120.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv", lpFilePart=0x0) returned 0x2b
	[0120.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0120.560] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\o6p nrcftjyq0r2.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0120.561] GetFileType (hFile=0x2cc) returned 0x1
	[0120.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0120.561] GetFileType (hFile=0x2cc) returned 0x1
	[0120.561] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x8fe5
	[0120.561] ReadFile (in: hFile=0x2cc, lpBuffer=0x29894e8, nNumberOfBytesToRead=0x8fe5, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x29894e8*, lpNumberOfBytesRead=0xafe99c*=0x8fe5, lpOverlapped=0x0) returned 1
	[0120.561] CloseHandle (hObject=0x2cc) returned 1
	[0120.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0120.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0120.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0120.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0120.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0120.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0120.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv", lpFilePart=0x0) returned 0x2b
	[0120.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0120.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\o6p nrcftjyq0r2.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0120.702] GetFileType (hFile=0x2cc) returned 0x1
	[0120.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0120.702] GetFileType (hFile=0x2cc) returned 0x1
	[0120.702] WriteFile (in: hFile=0x2cc, lpBuffer=0x2a033e0*, nNumberOfBytesToWrite=0x8ff0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a033e0*, lpNumberOfBytesWritten=0xafe990*=0x8ff0, lpOverlapped=0x0) returned 1
	[0120.703] CloseHandle (hObject=0x2cc) returned 1
	[0120.723] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0120.724] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv", lpFilePart=0x0) returned 0x2b
	[0120.724] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0120.724] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv.rogue", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv.rogue", lpFilePart=0x0) returned 0x31
	[0120.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0120.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\o6p nrcftjyq0r2.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bcdb60, ftCreationTime.dwHighDateTime=0x1d5e1d4, ftLastAccessTime.dwLowDateTime=0x2818d0f0, ftLastAccessTime.dwHighDateTime=0x1d5ecad, ftLastWriteTime.dwLowDateTime=0xa9359377, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x8ff0)) returned 1
	[0120.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0120.724] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\o6p nrcftjyq0r2.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\O6p NRcFtjyQ0R2.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\o6p nrcftjyq0r2.mkv.rogue")) returned 1
	[0120.726] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0120.726] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3", lpFilePart=0x0) returned 0x2d
	[0120.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0120.726] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\pjpxx4-5_-ff-0ern.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0120.726] GetFileType (hFile=0x2cc) returned 0x1
	[0120.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0120.726] GetFileType (hFile=0x2cc) returned 0x1
	[0120.726] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x11484
	[0120.726] ReadFile (in: hFile=0x2cc, lpBuffer=0x2a0c648, nNumberOfBytesToRead=0x11484, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a0c648*, lpNumberOfBytesRead=0xafe99c*=0x11484, lpOverlapped=0x0) returned 1
	[0120.727] CloseHandle (hObject=0x2cc) returned 1
	[0120.821] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0120.821] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0120.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0120.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0120.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0120.821] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0120.821] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3", lpFilePart=0x0) returned 0x2d
	[0120.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0120.821] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\pjpxx4-5_-ff-0ern.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0120.827] GetFileType (hFile=0x2cc) returned 0x1
	[0120.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0120.827] GetFileType (hFile=0x2cc) returned 0x1
	[0120.828] WriteFile (in: hFile=0x2cc, lpBuffer=0x2a8d1f4*, nNumberOfBytesToWrite=0x11490, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a8d1f4*, lpNumberOfBytesWritten=0xafe990*=0x11490, lpOverlapped=0x0) returned 1
	[0120.830] CloseHandle (hObject=0x2cc) returned 1
	[0120.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0120.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3", lpFilePart=0x0) returned 0x2d
	[0120.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0120.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3.rogue", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3.rogue", lpFilePart=0x0) returned 0x33
	[0120.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0120.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\pjpxx4-5_-ff-0ern.mp3"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6718d500, ftCreationTime.dwHighDateTime=0x1d5e615, ftLastAccessTime.dwLowDateTime=0x415a8400, ftLastAccessTime.dwHighDateTime=0x1d5ec44, ftLastWriteTime.dwLowDateTime=0xa948a595, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x11490)) returned 1
	[0120.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0120.852] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\pjpxx4-5_-ff-0ern.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\pJpxx4-5_-Ff-0ern.mp3.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\pjpxx4-5_-ff-0ern.mp3.rogue")) returned 1
	[0120.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23
	[0120.857] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv", nBufferLength=0x23, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv", lpFilePart=0x0) returned 0x22
	[0120.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0120.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\ppbzxz.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0120.857] GetFileType (hFile=0x2cc) returned 0x1
	[0120.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0120.857] GetFileType (hFile=0x2cc) returned 0x1
	[0120.857] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x13a05
	[0120.858] ReadFile (in: hFile=0x2cc, lpBuffer=0x2a9e8f0, nNumberOfBytesToRead=0x13a05, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a9e8f0*, lpNumberOfBytesRead=0xafe99c*=0x13a05, lpOverlapped=0x0) returned 1
	[0120.858] CloseHandle (hObject=0x2cc) returned 1
	[0120.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0120.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0120.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0120.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0120.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0120.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23
	[0120.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv", nBufferLength=0x23, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv", lpFilePart=0x0) returned 0x22
	[0120.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0120.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\ppbzxz.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0120.954] GetFileType (hFile=0x2cc) returned 0x1
	[0120.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0120.955] GetFileType (hFile=0x2cc) returned 0x1
	[0120.955] WriteFile (in: hFile=0x2cc, lpBuffer=0x29203c4*, nNumberOfBytesToWrite=0x13a10, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x29203c4*, lpNumberOfBytesWritten=0xafe990*=0x13a10, lpOverlapped=0x0) returned 1
	[0120.957] CloseHandle (hObject=0x2cc) returned 1
	[0120.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23
	[0120.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv", nBufferLength=0x23, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv", lpFilePart=0x0) returned 0x22
	[0120.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29
	[0120.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv.rogue", nBufferLength=0x29, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv.rogue", lpFilePart=0x0) returned 0x28
	[0120.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0120.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\ppbzxz.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa678b9d0, ftCreationTime.dwHighDateTime=0x1d5e774, ftLastAccessTime.dwLowDateTime=0xfd12a7c0, ftLastAccessTime.dwHighDateTime=0x1d5eb10, ftLastWriteTime.dwLowDateTime=0xa95bb8ae, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x13a10)) returned 1
	[0120.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0120.977] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\ppbzxz.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\PPBZxZ.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\ppbzxz.mkv.rogue")) returned 1
	[0120.996] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0120.996] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf", lpFilePart=0x0) returned 0x26
	[0120.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0120.996] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\pzpfwsywre.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0120.996] GetFileType (hFile=0x2cc) returned 0x1
	[0120.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0120.996] GetFileType (hFile=0x2cc) returned 0x1
	[0120.996] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x94e3
	[0120.997] ReadFile (in: hFile=0x2cc, lpBuffer=0x2934020, nNumberOfBytesToRead=0x94e3, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2934020*, lpNumberOfBytesRead=0xafe99c*=0x94e3, lpOverlapped=0x0) returned 1
	[0120.997] CloseHandle (hObject=0x2cc) returned 1
	[0121.097] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0121.097] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0121.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0121.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0121.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0121.097] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0121.097] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf", lpFilePart=0x0) returned 0x26
	[0121.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0121.097] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\pzpfwsywre.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0121.116] GetFileType (hFile=0x2cc) returned 0x1
	[0121.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0121.116] GetFileType (hFile=0x2cc) returned 0x1
	[0121.117] WriteFile (in: hFile=0x2cc, lpBuffer=0x29af818*, nNumberOfBytesToWrite=0x94f0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x29af818*, lpNumberOfBytesWritten=0xafe990*=0x94f0, lpOverlapped=0x0) returned 1
	[0121.120] CloseHandle (hObject=0x2cc) returned 1
	[0121.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0121.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf", lpFilePart=0x0) returned 0x26
	[0121.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0121.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf.rogue", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf.rogue", lpFilePart=0x0) returned 0x2c
	[0121.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0121.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\pzpfwsywre.pdf"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5712e40, ftCreationTime.dwHighDateTime=0x1d5e39e, ftLastAccessTime.dwLowDateTime=0xeb29bbf0, ftLastAccessTime.dwHighDateTime=0x1d5efa9, ftLastWriteTime.dwLowDateTime=0xa975f653, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x94f0)) returned 1
	[0121.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0121.132] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\pzpfwsywre.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\pZpfWsYWRe.pdf.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\pzpfwsywre.pdf.rogue")) returned 1
	[0121.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0121.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp", lpFilePart=0x0) returned 0x29
	[0121.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0121.337] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\q2k r_ljcrlq0.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0121.337] GetFileType (hFile=0x2cc) returned 0x1
	[0121.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0121.338] GetFileType (hFile=0x2cc) returned 0x1
	[0121.338] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x16191
	[0121.340] ReadFile (in: hFile=0x2cc, lpBuffer=0x3aaa050, nNumberOfBytesToRead=0x16191, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x3aaa050*, lpNumberOfBytesRead=0xafe99c*=0x16191, lpOverlapped=0x0) returned 1
	[0121.344] CloseHandle (hObject=0x2cc) returned 1
	[0121.503] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0121.503] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0121.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0121.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0121.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0121.503] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0121.503] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp", lpFilePart=0x0) returned 0x29
	[0121.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0121.503] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\q2k r_ljcrlq0.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0121.506] GetFileType (hFile=0x2cc) returned 0x1
	[0121.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0121.506] GetFileType (hFile=0x2cc) returned 0x1
	[0121.506] WriteFile (in: hFile=0x2cc, lpBuffer=0x3b188a0*, nNumberOfBytesToWrite=0x161a0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x3b188a0*, lpNumberOfBytesWritten=0xafe990*=0x161a0, lpOverlapped=0x0) returned 1
	[0121.510] CloseHandle (hObject=0x2cc) returned 1
	[0121.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0121.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp", lpFilePart=0x0) returned 0x29
	[0121.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30
	[0121.516] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp.rogue", nBufferLength=0x30, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp.rogue", lpFilePart=0x0) returned 0x2f
	[0121.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0121.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\q2k r_ljcrlq0.bmp"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1662d720, ftCreationTime.dwHighDateTime=0x1d5eff5, ftLastAccessTime.dwLowDateTime=0x7eff8b50, ftLastAccessTime.dwHighDateTime=0x1d5e11f, ftLastWriteTime.dwLowDateTime=0xa9b190b1, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x161a0)) returned 1
	[0121.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0121.516] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\q2k r_ljcrlq0.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\Q2k R_LJCrLq0.bmp.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\q2k r_ljcrlq0.bmp.rogue")) returned 1
	[0121.517] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0121.517] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf", lpFilePart=0x0) returned 0x2b
	[0121.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0121.517] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\wbd6jpp1vpubl6f.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0121.518] GetFileType (hFile=0x2cc) returned 0x1
	[0121.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0121.518] GetFileType (hFile=0x2cc) returned 0x1
	[0121.518] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0xbee5
	[0121.518] ReadFile (in: hFile=0x2cc, lpBuffer=0x2a05fd0, nNumberOfBytesToRead=0xbee5, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a05fd0*, lpNumberOfBytesRead=0xafe99c*=0xbee5, lpOverlapped=0x0) returned 1
	[0121.519] CloseHandle (hObject=0x2cc) returned 1
	[0121.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0121.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0121.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0121.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0121.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0121.667] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0121.667] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf", lpFilePart=0x0) returned 0x2b
	[0121.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0121.710] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\wbd6jpp1vpubl6f.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0121.711] GetFileType (hFile=0x2cc) returned 0x1
	[0121.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0121.712] GetFileType (hFile=0x2cc) returned 0x1
	[0121.712] WriteFile (in: hFile=0x2cc, lpBuffer=0x2a76aa0*, nNumberOfBytesToWrite=0xbef0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a76aa0*, lpNumberOfBytesWritten=0xafe990*=0xbef0, lpOverlapped=0x0) returned 1
	[0121.735] CloseHandle (hObject=0x2cc) returned 1
	[0121.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0121.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf", lpFilePart=0x0) returned 0x2b
	[0121.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0121.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf.rogue", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf.rogue", lpFilePart=0x0) returned 0x31
	[0121.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0121.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\wbd6jpp1vpubl6f.pdf"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94a7b240, ftCreationTime.dwHighDateTime=0x1d5eebf, ftLastAccessTime.dwLowDateTime=0xbe0d9f80, ftLastAccessTime.dwHighDateTime=0x1d5eba6, ftLastWriteTime.dwLowDateTime=0xa9d2ee76, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xbef0)) returned 1
	[0121.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0121.746] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\wbd6jpp1vpubl6f.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\wbD6Jpp1VpuBL6f.pdf.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\wbd6jpp1vpubl6f.pdf.rogue")) returned 1
	[0121.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0121.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi", lpFilePart=0x0) returned 0x2b
	[0121.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0121.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\yenm3xhora 9bl8.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0121.747] GetFileType (hFile=0x2cc) returned 0x1
	[0121.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0121.748] GetFileType (hFile=0x2cc) returned 0x1
	[0121.748] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x6e86
	[0121.748] ReadFile (in: hFile=0x2cc, lpBuffer=0x2a82c1c, nNumberOfBytesToRead=0x6e86, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a82c1c*, lpNumberOfBytesRead=0xafe99c*=0x6e86, lpOverlapped=0x0) returned 1
	[0121.748] CloseHandle (hObject=0x2cc) returned 1
	[0121.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0121.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0121.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0121.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0121.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0121.827] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0121.827] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi", lpFilePart=0x0) returned 0x2b
	[0121.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0121.827] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\yenm3xhora 9bl8.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0121.829] GetFileType (hFile=0x2cc) returned 0x1
	[0121.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0121.829] GetFileType (hFile=0x2cc) returned 0x1
	[0121.829] WriteFile (in: hFile=0x2cc, lpBuffer=0x2af22d8*, nNumberOfBytesToWrite=0x6e90, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2af22d8*, lpNumberOfBytesWritten=0xafe990*=0x6e90, lpOverlapped=0x0) returned 1
	[0121.830] CloseHandle (hObject=0x2cc) returned 1
	[0121.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0121.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi", lpFilePart=0x0) returned 0x2b
	[0121.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0121.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi.rogue", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi.rogue", lpFilePart=0x0) returned 0x31
	[0121.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0121.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\yenm3xhora 9bl8.avi"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee8c680, ftCreationTime.dwHighDateTime=0x1d5e2b5, ftLastAccessTime.dwLowDateTime=0xa00581c0, ftLastAccessTime.dwHighDateTime=0x1d5ec72, ftLastWriteTime.dwLowDateTime=0xa9e13df5, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x6e90)) returned 1
	[0121.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0121.832] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\yenm3xhora 9bl8.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\YENM3XHoRa 9Bl8.avi.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\yenm3xhora 9bl8.avi.rogue")) returned 1
	[0121.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0121.833] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0121.833] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto", lpFilePart=0x0) returned 0x23
	[0121.833] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84633f90, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0x69907ba0, ftLastAccessTime.dwHighDateTime=0x1d5ed2f, ftLastWriteTime.dwLowDateTime=0x69907ba0, ftLastWriteTime.dwHighDateTime=0x1d5ed2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d700
	[0121.833] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84633f90, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0x69907ba0, ftLastAccessTime.dwHighDateTime=0x1d5ed2f, ftLastWriteTime.dwLowDateTime=0x69907ba0, ftLastWriteTime.dwHighDateTime=0x1d5ed2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0121.833] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1153420, ftCreationTime.dwHighDateTime=0x1d5e818, ftLastAccessTime.dwLowDateTime=0x3d3e24c0, ftLastAccessTime.dwHighDateTime=0x1d5e47f, ftLastWriteTime.dwLowDateTime=0x3d3e24c0, ftLastWriteTime.dwHighDateTime=0x1d5e47f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-44naS.gif", cAlternateFileName="")) returned 1
	[0121.834] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da3c390, ftCreationTime.dwHighDateTime=0x1d5ebb4, ftLastAccessTime.dwLowDateTime=0xa61430, ftLastAccessTime.dwHighDateTime=0x1d5e6de, ftLastWriteTime.dwLowDateTime=0xa61430, ftLastWriteTime.dwHighDateTime=0x1d5e6de, nFileSizeHigh=0x0, nFileSizeLow=0x17b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="-tZ mXkrzchE4sb.ots", cAlternateFileName="-TZMXK~1.OTS")) returned 1
	[0121.834] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1f280, ftCreationTime.dwHighDateTime=0x1d5eea8, ftLastAccessTime.dwLowDateTime=0x738cc4f0, ftLastAccessTime.dwHighDateTime=0x1d5ef38, ftLastWriteTime.dwLowDateTime=0x738cc4f0, ftLastWriteTime.dwHighDateTime=0x1d5ef38, nFileSizeHigh=0x0, nFileSizeLow=0x56e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="3UURnL42yKIc.pptx", cAlternateFileName="3UURNL~1.PPT")) returned 1
	[0121.834] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf008de80, ftCreationTime.dwHighDateTime=0x1d5efe5, ftLastAccessTime.dwLowDateTime=0xcfed5300, ftLastAccessTime.dwHighDateTime=0x1d5f112, ftLastWriteTime.dwLowDateTime=0xcfed5300, ftLastWriteTime.dwHighDateTime=0x1d5f112, nFileSizeHigh=0x0, nFileSizeLow=0x2862, dwReserved0=0x0, dwReserved1=0x0, cFileName="BU wLpP0Lpajv_GO.wav", cAlternateFileName="BUWLPP~1.WAV")) returned 1
	[0121.834] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52e2300, ftCreationTime.dwHighDateTime=0x1d5eb94, ftLastAccessTime.dwLowDateTime=0x2a66e260, ftLastAccessTime.dwHighDateTime=0x1d5eaba, ftLastWriteTime.dwLowDateTime=0x2a66e260, ftLastWriteTime.dwHighDateTime=0x1d5eaba, nFileSizeHigh=0x0, nFileSizeLow=0xd9ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctlLnDxYs.xls", cAlternateFileName="CTLLND~1.XLS")) returned 1
	[0121.834] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f661e80, ftCreationTime.dwHighDateTime=0x1d5e4d9, ftLastAccessTime.dwLowDateTime=0xdb82bea0, ftLastAccessTime.dwHighDateTime=0x1d5e490, ftLastWriteTime.dwLowDateTime=0xdb82bea0, ftLastWriteTime.dwHighDateTime=0x1d5e490, nFileSizeHigh=0x0, nFileSizeLow=0xaed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GSsVL.pps", cAlternateFileName="")) returned 1
	[0121.834] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4388e70, ftCreationTime.dwHighDateTime=0x1d5e7bb, ftLastAccessTime.dwLowDateTime=0x556d5bc0, ftLastAccessTime.dwHighDateTime=0x1d5eb7c, ftLastWriteTime.dwLowDateTime=0x556d5bc0, ftLastWriteTime.dwHighDateTime=0x1d5eb7c, nFileSizeHigh=0x0, nFileSizeLow=0x140b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iMNWoYK4Ibdd.mkv", cAlternateFileName="IMNWOY~1.MKV")) returned 1
	[0121.834] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2c75290, ftCreationTime.dwHighDateTime=0x1d5e4f9, ftLastAccessTime.dwLowDateTime=0x6463590, ftLastAccessTime.dwHighDateTime=0x1d5e806, ftLastWriteTime.dwLowDateTime=0x6463590, ftLastWriteTime.dwHighDateTime=0x1d5e806, nFileSizeHigh=0x0, nFileSizeLow=0x166c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="KwGAkV EXZ3kxIaWo.jpg", cAlternateFileName="KWGAKV~1.JPG")) returned 1
	[0121.835] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee1ac90, ftCreationTime.dwHighDateTime=0x1d5f047, ftLastAccessTime.dwLowDateTime=0x1f374ac0, ftLastAccessTime.dwHighDateTime=0x1d5e915, ftLastWriteTime.dwLowDateTime=0x1f374ac0, ftLastWriteTime.dwHighDateTime=0x1d5e915, nFileSizeHigh=0x0, nFileSizeLow=0x122e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MKi9c49U.png", cAlternateFileName="")) returned 1
	[0121.835] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e766e20, ftCreationTime.dwHighDateTime=0x1d5e21d, ftLastAccessTime.dwLowDateTime=0x69c3d60, ftLastAccessTime.dwHighDateTime=0x1d5e8cd, ftLastWriteTime.dwLowDateTime=0x69c3d60, ftLastWriteTime.dwHighDateTime=0x1d5e8cd, nFileSizeHigh=0x0, nFileSizeLow=0x85e, dwReserved0=0x0, dwReserved1=0x0, cFileName="q5g4A2_KwZmg_m.docx", cAlternateFileName="Q5G4A2~1.DOC")) returned 1
	[0121.835] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ccde00, ftCreationTime.dwHighDateTime=0x1d5ecd6, ftLastAccessTime.dwLowDateTime=0xf875bb70, ftLastAccessTime.dwHighDateTime=0x1d5e48b, ftLastWriteTime.dwLowDateTime=0xf875bb70, ftLastWriteTime.dwHighDateTime=0x1d5e48b, nFileSizeHigh=0x0, nFileSizeLow=0x680a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMdawQ.xls", cAlternateFileName="")) returned 1
	[0121.835] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4425fc0, ftCreationTime.dwHighDateTime=0x1d5e618, ftLastAccessTime.dwLowDateTime=0xa13a5e80, ftLastAccessTime.dwHighDateTime=0x1d5eb91, ftLastWriteTime.dwLowDateTime=0xa13a5e80, ftLastWriteTime.dwHighDateTime=0x1d5eb91, nFileSizeHigh=0x0, nFileSizeLow=0xc8b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="TA37aX03J 25R5.doc", cAlternateFileName="TA37AX~1.DOC")) returned 1
	[0121.835] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa393cad0, ftCreationTime.dwHighDateTime=0x1d5e0fc, ftLastAccessTime.dwLowDateTime=0xa35de6d0, ftLastAccessTime.dwHighDateTime=0x1d5ef2b, ftLastWriteTime.dwLowDateTime=0xa35de6d0, ftLastWriteTime.dwHighDateTime=0x1d5ef2b, nFileSizeHigh=0x0, nFileSizeLow=0xfa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="U2A7KBSK.m4a", cAlternateFileName="")) returned 1
	[0121.835] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a972b0, ftCreationTime.dwHighDateTime=0x1d5e7f4, ftLastAccessTime.dwLowDateTime=0xcf5c5380, ftLastAccessTime.dwHighDateTime=0x1d5f097, ftLastWriteTime.dwLowDateTime=0xcf5c5380, ftLastWriteTime.dwHighDateTime=0x1d5f097, nFileSizeHigh=0x0, nFileSizeLow=0x3374, dwReserved0=0x0, dwReserved1=0x0, cFileName="venFA HB1ntS.odp", cAlternateFileName="VENFAH~1.ODP")) returned 1
	[0121.835] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4d62f0, ftCreationTime.dwHighDateTime=0x1d5ec4d, ftLastAccessTime.dwLowDateTime=0x5b3917d0, ftLastAccessTime.dwHighDateTime=0x1d5ece2, ftLastWriteTime.dwLowDateTime=0x5b3917d0, ftLastWriteTime.dwHighDateTime=0x1d5ece2, nFileSizeHigh=0x0, nFileSizeLow=0x10e2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="wUOtYmcDXwbtj.jpg", cAlternateFileName="WUOTYM~1.JPG")) returned 1
	[0121.836] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc44700, ftCreationTime.dwHighDateTime=0x1d5e2da, ftLastAccessTime.dwLowDateTime=0xd9480cc0, ftLastAccessTime.dwHighDateTime=0x1d5eb26, ftLastWriteTime.dwLowDateTime=0xd9480cc0, ftLastWriteTime.dwHighDateTime=0x1d5eb26, nFileSizeHigh=0x0, nFileSizeLow=0x38ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="XpWX9X7HcnV.png", cAlternateFileName="XPWX9X~1.PNG")) returned 1
	[0121.836] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0121.836] FindClose (in: hFindFile=0xd9d700 | out: hFindFile=0xd9d700) returned 1
	[0121.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0121.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0121.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0121.836] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0121.836] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto", lpFilePart=0x0) returned 0x23
	[0121.836] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84633f90, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0x69907ba0, ftLastAccessTime.dwHighDateTime=0x1d5ed2f, ftLastWriteTime.dwLowDateTime=0x69907ba0, ftLastWriteTime.dwHighDateTime=0x1d5ed2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d6c0
	[0121.836] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84633f90, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0x69907ba0, ftLastAccessTime.dwHighDateTime=0x1d5ed2f, ftLastWriteTime.dwLowDateTime=0x69907ba0, ftLastWriteTime.dwHighDateTime=0x1d5ed2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0121.837] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1153420, ftCreationTime.dwHighDateTime=0x1d5e818, ftLastAccessTime.dwLowDateTime=0x3d3e24c0, ftLastAccessTime.dwHighDateTime=0x1d5e47f, ftLastWriteTime.dwLowDateTime=0x3d3e24c0, ftLastWriteTime.dwHighDateTime=0x1d5e47f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-44naS.gif", cAlternateFileName="")) returned 1
	[0121.837] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da3c390, ftCreationTime.dwHighDateTime=0x1d5ebb4, ftLastAccessTime.dwLowDateTime=0xa61430, ftLastAccessTime.dwHighDateTime=0x1d5e6de, ftLastWriteTime.dwLowDateTime=0xa61430, ftLastWriteTime.dwHighDateTime=0x1d5e6de, nFileSizeHigh=0x0, nFileSizeLow=0x17b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="-tZ mXkrzchE4sb.ots", cAlternateFileName="-TZMXK~1.OTS")) returned 1
	[0121.837] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1f280, ftCreationTime.dwHighDateTime=0x1d5eea8, ftLastAccessTime.dwLowDateTime=0x738cc4f0, ftLastAccessTime.dwHighDateTime=0x1d5ef38, ftLastWriteTime.dwLowDateTime=0x738cc4f0, ftLastWriteTime.dwHighDateTime=0x1d5ef38, nFileSizeHigh=0x0, nFileSizeLow=0x56e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="3UURnL42yKIc.pptx", cAlternateFileName="3UURNL~1.PPT")) returned 1
	[0121.837] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf008de80, ftCreationTime.dwHighDateTime=0x1d5efe5, ftLastAccessTime.dwLowDateTime=0xcfed5300, ftLastAccessTime.dwHighDateTime=0x1d5f112, ftLastWriteTime.dwLowDateTime=0xcfed5300, ftLastWriteTime.dwHighDateTime=0x1d5f112, nFileSizeHigh=0x0, nFileSizeLow=0x2862, dwReserved0=0x0, dwReserved1=0x0, cFileName="BU wLpP0Lpajv_GO.wav", cAlternateFileName="BUWLPP~1.WAV")) returned 1
	[0121.837] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52e2300, ftCreationTime.dwHighDateTime=0x1d5eb94, ftLastAccessTime.dwLowDateTime=0x2a66e260, ftLastAccessTime.dwHighDateTime=0x1d5eaba, ftLastWriteTime.dwLowDateTime=0x2a66e260, ftLastWriteTime.dwHighDateTime=0x1d5eaba, nFileSizeHigh=0x0, nFileSizeLow=0xd9ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctlLnDxYs.xls", cAlternateFileName="CTLLND~1.XLS")) returned 1
	[0121.838] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f661e80, ftCreationTime.dwHighDateTime=0x1d5e4d9, ftLastAccessTime.dwLowDateTime=0xdb82bea0, ftLastAccessTime.dwHighDateTime=0x1d5e490, ftLastWriteTime.dwLowDateTime=0xdb82bea0, ftLastWriteTime.dwHighDateTime=0x1d5e490, nFileSizeHigh=0x0, nFileSizeLow=0xaed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GSsVL.pps", cAlternateFileName="")) returned 1
	[0121.838] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4388e70, ftCreationTime.dwHighDateTime=0x1d5e7bb, ftLastAccessTime.dwLowDateTime=0x556d5bc0, ftLastAccessTime.dwHighDateTime=0x1d5eb7c, ftLastWriteTime.dwLowDateTime=0x556d5bc0, ftLastWriteTime.dwHighDateTime=0x1d5eb7c, nFileSizeHigh=0x0, nFileSizeLow=0x140b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iMNWoYK4Ibdd.mkv", cAlternateFileName="IMNWOY~1.MKV")) returned 1
	[0121.838] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2c75290, ftCreationTime.dwHighDateTime=0x1d5e4f9, ftLastAccessTime.dwLowDateTime=0x6463590, ftLastAccessTime.dwHighDateTime=0x1d5e806, ftLastWriteTime.dwLowDateTime=0x6463590, ftLastWriteTime.dwHighDateTime=0x1d5e806, nFileSizeHigh=0x0, nFileSizeLow=0x166c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="KwGAkV EXZ3kxIaWo.jpg", cAlternateFileName="KWGAKV~1.JPG")) returned 1
	[0121.838] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee1ac90, ftCreationTime.dwHighDateTime=0x1d5f047, ftLastAccessTime.dwLowDateTime=0x1f374ac0, ftLastAccessTime.dwHighDateTime=0x1d5e915, ftLastWriteTime.dwLowDateTime=0x1f374ac0, ftLastWriteTime.dwHighDateTime=0x1d5e915, nFileSizeHigh=0x0, nFileSizeLow=0x122e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MKi9c49U.png", cAlternateFileName="")) returned 1
	[0121.838] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e766e20, ftCreationTime.dwHighDateTime=0x1d5e21d, ftLastAccessTime.dwLowDateTime=0x69c3d60, ftLastAccessTime.dwHighDateTime=0x1d5e8cd, ftLastWriteTime.dwLowDateTime=0x69c3d60, ftLastWriteTime.dwHighDateTime=0x1d5e8cd, nFileSizeHigh=0x0, nFileSizeLow=0x85e, dwReserved0=0x0, dwReserved1=0x0, cFileName="q5g4A2_KwZmg_m.docx", cAlternateFileName="Q5G4A2~1.DOC")) returned 1
	[0121.838] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ccde00, ftCreationTime.dwHighDateTime=0x1d5ecd6, ftLastAccessTime.dwLowDateTime=0xf875bb70, ftLastAccessTime.dwHighDateTime=0x1d5e48b, ftLastWriteTime.dwLowDateTime=0xf875bb70, ftLastWriteTime.dwHighDateTime=0x1d5e48b, nFileSizeHigh=0x0, nFileSizeLow=0x680a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMdawQ.xls", cAlternateFileName="")) returned 1
	[0121.839] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4425fc0, ftCreationTime.dwHighDateTime=0x1d5e618, ftLastAccessTime.dwLowDateTime=0xa13a5e80, ftLastAccessTime.dwHighDateTime=0x1d5eb91, ftLastWriteTime.dwLowDateTime=0xa13a5e80, ftLastWriteTime.dwHighDateTime=0x1d5eb91, nFileSizeHigh=0x0, nFileSizeLow=0xc8b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="TA37aX03J 25R5.doc", cAlternateFileName="TA37AX~1.DOC")) returned 1
	[0121.839] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa393cad0, ftCreationTime.dwHighDateTime=0x1d5e0fc, ftLastAccessTime.dwLowDateTime=0xa35de6d0, ftLastAccessTime.dwHighDateTime=0x1d5ef2b, ftLastWriteTime.dwLowDateTime=0xa35de6d0, ftLastWriteTime.dwHighDateTime=0x1d5ef2b, nFileSizeHigh=0x0, nFileSizeLow=0xfa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="U2A7KBSK.m4a", cAlternateFileName="")) returned 1
	[0121.840] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a972b0, ftCreationTime.dwHighDateTime=0x1d5e7f4, ftLastAccessTime.dwLowDateTime=0xcf5c5380, ftLastAccessTime.dwHighDateTime=0x1d5f097, ftLastWriteTime.dwLowDateTime=0xcf5c5380, ftLastWriteTime.dwHighDateTime=0x1d5f097, nFileSizeHigh=0x0, nFileSizeLow=0x3374, dwReserved0=0x0, dwReserved1=0x0, cFileName="venFA HB1ntS.odp", cAlternateFileName="VENFAH~1.ODP")) returned 1
	[0121.840] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4d62f0, ftCreationTime.dwHighDateTime=0x1d5ec4d, ftLastAccessTime.dwLowDateTime=0x5b3917d0, ftLastAccessTime.dwHighDateTime=0x1d5ece2, ftLastWriteTime.dwLowDateTime=0x5b3917d0, ftLastWriteTime.dwHighDateTime=0x1d5ece2, nFileSizeHigh=0x0, nFileSizeLow=0x10e2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="wUOtYmcDXwbtj.jpg", cAlternateFileName="WUOTYM~1.JPG")) returned 1
	[0121.840] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc44700, ftCreationTime.dwHighDateTime=0x1d5e2da, ftLastAccessTime.dwLowDateTime=0xd9480cc0, ftLastAccessTime.dwHighDateTime=0x1d5eb26, ftLastWriteTime.dwLowDateTime=0xd9480cc0, ftLastWriteTime.dwHighDateTime=0x1d5eb26, nFileSizeHigh=0x0, nFileSizeLow=0x38ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="XpWX9X7HcnV.png", cAlternateFileName="XPWX9X~1.PNG")) returned 1
	[0121.840] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc44700, ftCreationTime.dwHighDateTime=0x1d5e2da, ftLastAccessTime.dwLowDateTime=0xd9480cc0, ftLastAccessTime.dwHighDateTime=0x1d5eb26, ftLastWriteTime.dwLowDateTime=0xd9480cc0, ftLastWriteTime.dwHighDateTime=0x1d5eb26, nFileSizeHigh=0x0, nFileSizeLow=0x38ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="XpWX9X7HcnV.png", cAlternateFileName="XPWX9X~1.PNG")) returned 0
	[0121.840] FindClose (in: hFindFile=0xd9d6c0 | out: hFindFile=0xd9d6c0) returned 1
	[0121.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0121.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0121.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0121.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx", lpFilePart=0x0) returned 0x35
	[0121.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0121.841] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\3uurnl42ykic.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0121.841] GetFileType (hFile=0x2cc) returned 0x1
	[0121.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0121.841] GetFileType (hFile=0x2cc) returned 0x1
	[0121.841] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x56e8
	[0121.841] ReadFile (in: hFile=0x2cc, lpBuffer=0x2afcc8c, nNumberOfBytesToRead=0x56e8, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2afcc8c*, lpNumberOfBytesRead=0xafe928*=0x56e8, lpOverlapped=0x0) returned 1
	[0121.842] CloseHandle (hObject=0x2cc) returned 1
	[0121.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0121.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0121.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0121.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0121.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0121.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0121.970] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx", lpFilePart=0x0) returned 0x35
	[0121.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0121.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\3uurnl42ykic.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0121.971] GetFileType (hFile=0x2cc) returned 0x1
	[0121.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0121.971] GetFileType (hFile=0x2cc) returned 0x1
	[0121.971] WriteFile (in: hFile=0x2cc, lpBuffer=0x296b318*, nNumberOfBytesToWrite=0x56f0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x296b318*, lpNumberOfBytesWritten=0xafe91c*=0x56f0, lpOverlapped=0x0) returned 1
	[0121.972] CloseHandle (hObject=0x2cc) returned 1
	[0121.973] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0121.974] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx", lpFilePart=0x0) returned 0x35
	[0121.974] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c
	[0121.974] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx.rogue", nBufferLength=0x3c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx.rogue", lpFilePart=0x0) returned 0x3b
	[0121.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0121.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\3uurnl42ykic.pptx"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1f280, ftCreationTime.dwHighDateTime=0x1d5eea8, ftLastAccessTime.dwLowDateTime=0x738cc4f0, ftLastAccessTime.dwHighDateTime=0x1d5ef38, ftLastWriteTime.dwLowDateTime=0xa9f6b706, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x56f0)) returned 1
	[0121.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0121.974] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\3uurnl42ykic.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\3UURnL42yKIc.pptx.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\3uurnl42ykic.pptx.rogue")) returned 1
	[0121.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0121.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls", lpFilePart=0x0) returned 0x31
	[0121.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0121.975] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\ctllndxys.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0121.975] GetFileType (hFile=0x2cc) returned 0x1
	[0121.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0121.975] GetFileType (hFile=0x2cc) returned 0x1
	[0121.975] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0xd9ce
	[0121.975] ReadFile (in: hFile=0x2cc, lpBuffer=0x2970c98, nNumberOfBytesToRead=0xd9ce, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2970c98*, lpNumberOfBytesRead=0xafe928*=0xd9ce, lpOverlapped=0x0) returned 1
	[0121.977] CloseHandle (hObject=0x2cc) returned 1
	[0122.076] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0122.076] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0122.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0122.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0122.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0122.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls", lpFilePart=0x0) returned 0x31
	[0122.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0122.077] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\ctllndxys.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0122.078] GetFileType (hFile=0x2cc) returned 0x1
	[0122.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0122.079] GetFileType (hFile=0x2cc) returned 0x1
	[0122.079] WriteFile (in: hFile=0x2cc, lpBuffer=0x29e6964*, nNumberOfBytesToWrite=0xd9d0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x29e6964*, lpNumberOfBytesWritten=0xafe91c*=0xd9d0, lpOverlapped=0x0) returned 1
	[0122.080] CloseHandle (hObject=0x2cc) returned 1
	[0122.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0122.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls", lpFilePart=0x0) returned 0x31
	[0122.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38
	[0122.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls.rogue", nBufferLength=0x38, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls.rogue", lpFilePart=0x0) returned 0x37
	[0122.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0122.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\ctllndxys.xls"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52e2300, ftCreationTime.dwHighDateTime=0x1d5eb94, ftLastAccessTime.dwLowDateTime=0x2a66e260, ftLastAccessTime.dwHighDateTime=0x1d5eaba, ftLastWriteTime.dwLowDateTime=0xaa076350, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xd9d0)) returned 1
	[0122.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0122.083] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\ctllndxys.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\ctlLnDxYs.xls.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\ctllndxys.xls.rogue")) returned 1
	[0122.084] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0122.084] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv", lpFilePart=0x0) returned 0x34
	[0122.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0122.084] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\imnwoyk4ibdd.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0122.084] GetFileType (hFile=0x2cc) returned 0x1
	[0122.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0122.084] GetFileType (hFile=0x2cc) returned 0x1
	[0122.084] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x140b0
	[0122.085] ReadFile (in: hFile=0x2cc, lpBuffer=0x29f45bc, nNumberOfBytesToRead=0x140b0, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x29f45bc*, lpNumberOfBytesRead=0xafe928*=0x140b0, lpOverlapped=0x0) returned 1
	[0122.086] CloseHandle (hObject=0x2cc) returned 1
	[0122.158] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0122.159] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0122.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0122.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0122.159] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0122.159] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv", lpFilePart=0x0) returned 0x34
	[0122.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0122.159] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\imnwoyk4ibdd.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0122.161] GetFileType (hFile=0x2cc) returned 0x1
	[0122.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0122.161] GetFileType (hFile=0x2cc) returned 0x1
	[0122.161] WriteFile (in: hFile=0x2cc, lpBuffer=0x2a7d5f8*, nNumberOfBytesToWrite=0x140c0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2a7d5f8*, lpNumberOfBytesWritten=0xafe91c*=0x140c0, lpOverlapped=0x0) returned 1
	[0122.163] CloseHandle (hObject=0x2cc) returned 1
	[0122.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0122.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv", lpFilePart=0x0) returned 0x34
	[0122.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b
	[0122.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv.rogue", nBufferLength=0x3b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv.rogue", lpFilePart=0x0) returned 0x3a
	[0122.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0122.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\imnwoyk4ibdd.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4388e70, ftCreationTime.dwHighDateTime=0x1d5e7bb, ftLastAccessTime.dwLowDateTime=0x556d5bc0, ftLastAccessTime.dwHighDateTime=0x1d5eb7c, ftLastWriteTime.dwLowDateTime=0xaa134f4a, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x140c0)) returned 1
	[0122.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0122.166] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\imnwoyk4ibdd.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\iMNWoYK4Ibdd.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\imnwoyk4ibdd.mkv.rogue")) returned 1
	[0122.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0122.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg", lpFilePart=0x0) returned 0x39
	[0122.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0122.167] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\kwgakv exz3kxiawo.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0122.167] GetFileType (hFile=0x2cc) returned 0x1
	[0122.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0122.167] GetFileType (hFile=0x2cc) returned 0x1
	[0122.167] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x166c2
	[0122.168] ReadFile (in: hFile=0x2cc, lpBuffer=0x3b89d60, nNumberOfBytesToRead=0x166c2, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x3b89d60*, lpNumberOfBytesRead=0xafe928*=0x166c2, lpOverlapped=0x0) returned 1
	[0122.170] CloseHandle (hObject=0x2cc) returned 1
	[0122.336] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0122.336] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0122.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0122.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0122.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0122.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg", lpFilePart=0x0) returned 0x39
	[0122.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0122.337] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\kwgakv exz3kxiawo.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0122.386] GetFileType (hFile=0x2cc) returned 0x1
	[0122.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0122.386] GetFileType (hFile=0x2cc) returned 0x1
	[0122.386] WriteFile (in: hFile=0x2cc, lpBuffer=0x3bf9fa0*, nNumberOfBytesToWrite=0x166d0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x3bf9fa0*, lpNumberOfBytesWritten=0xafe91c*=0x166d0, lpOverlapped=0x0) returned 1
	[0122.389] CloseHandle (hObject=0x2cc) returned 1
	[0122.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0122.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg", lpFilePart=0x0) returned 0x39
	[0122.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40
	[0122.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg.rogue", nBufferLength=0x40, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg.rogue", lpFilePart=0x0) returned 0x3f
	[0122.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0122.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\kwgakv exz3kxiawo.jpg"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2c75290, ftCreationTime.dwHighDateTime=0x1d5e4f9, ftLastAccessTime.dwLowDateTime=0x6463590, ftLastAccessTime.dwHighDateTime=0x1d5e806, ftLastWriteTime.dwLowDateTime=0xaa3711d1, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x166d0)) returned 1
	[0122.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0122.393] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\kwgakv exz3kxiawo.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\KwGAkV EXZ3kxIaWo.jpg.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\kwgakv exz3kxiawo.jpg.rogue")) returned 1
	[0122.394] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0122.394] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png", lpFilePart=0x0) returned 0x30
	[0122.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0122.395] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\mki9c49u.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0122.395] GetFileType (hFile=0x2cc) returned 0x1
	[0122.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0122.395] GetFileType (hFile=0x2cc) returned 0x1
	[0122.395] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x122e0
	[0122.395] ReadFile (in: hFile=0x2cc, lpBuffer=0x2ade9c4, nNumberOfBytesToRead=0x122e0, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2ade9c4*, lpNumberOfBytesRead=0xafe928*=0x122e0, lpOverlapped=0x0) returned 1
	[0122.397] CloseHandle (hObject=0x2cc) returned 1
	[0122.828] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0122.828] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0122.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0122.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0122.828] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0122.828] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png", lpFilePart=0x0) returned 0x30
	[0122.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0122.828] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\mki9c49u.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0122.830] GetFileType (hFile=0x2cc) returned 0x1
	[0122.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0122.830] GetFileType (hFile=0x2cc) returned 0x1
	[0122.830] WriteFile (in: hFile=0x2cc, lpBuffer=0x2949bf4*, nNumberOfBytesToWrite=0x122f0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2949bf4*, lpNumberOfBytesWritten=0xafe91c*=0x122f0, lpOverlapped=0x0) returned 1
	[0122.833] CloseHandle (hObject=0x2cc) returned 1
	[0122.836] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0122.836] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png", lpFilePart=0x0) returned 0x30
	[0122.836] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37
	[0122.836] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png.rogue", nBufferLength=0x37, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png.rogue", lpFilePart=0x0) returned 0x36
	[0122.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0122.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\mki9c49u.png"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee1ac90, ftCreationTime.dwHighDateTime=0x1d5f047, ftLastAccessTime.dwLowDateTime=0x1f374ac0, ftLastAccessTime.dwHighDateTime=0x1d5e915, ftLastWriteTime.dwLowDateTime=0xaa79d786, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x122f0)) returned 1
	[0122.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0122.837] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\mki9c49u.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\MKi9c49U.png.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\mki9c49u.png.rogue")) returned 1
	[0122.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38
	[0122.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx", nBufferLength=0x38, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx", lpFilePart=0x0) returned 0x37
	[0122.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0122.838] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\q5g4a2_kwzmg_m.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0122.838] GetFileType (hFile=0x2cc) returned 0x1
	[0122.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0122.838] GetFileType (hFile=0x2cc) returned 0x1
	[0122.838] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x85e
	[0122.838] ReadFile (in: hFile=0x2cc, lpBuffer=0x295c9c4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x295c9c4*, lpNumberOfBytesRead=0xafe928*=0x85e, lpOverlapped=0x0) returned 1
	[0122.886] CloseHandle (hObject=0x2cc) returned 1
	[0123.033] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0123.033] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0123.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0123.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0123.034] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38
	[0123.034] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx", nBufferLength=0x38, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx", lpFilePart=0x0) returned 0x37
	[0123.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0123.034] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\q5g4a2_kwzmg_m.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0123.035] GetFileType (hFile=0x2cc) returned 0x1
	[0123.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0123.035] GetFileType (hFile=0x2cc) returned 0x1
	[0123.035] WriteFile (in: hFile=0x2cc, lpBuffer=0x29ad448*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0xafe8f0, lpOverlapped=0x0 | out: lpBuffer=0x29ad448*, lpNumberOfBytesWritten=0xafe8f0*=0x860, lpOverlapped=0x0) returned 1
	[0123.037] CloseHandle (hObject=0x2cc) returned 1
	[0123.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38
	[0123.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx", nBufferLength=0x38, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx", lpFilePart=0x0) returned 0x37
	[0123.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e
	[0123.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx.rogue", nBufferLength=0x3e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx.rogue", lpFilePart=0x0) returned 0x3d
	[0123.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0123.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\q5g4a2_kwzmg_m.docx"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e766e20, ftCreationTime.dwHighDateTime=0x1d5e21d, ftLastAccessTime.dwLowDateTime=0x69c3d60, ftLastAccessTime.dwHighDateTime=0x1d5e8cd, ftLastWriteTime.dwLowDateTime=0xaa98d245, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1
	[0123.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0123.039] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\q5g4a2_kwzmg_m.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\q5g4A2_KwZmg_m.docx.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\q5g4a2_kwzmg_m.docx.rogue")) returned 1
	[0123.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0123.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls", lpFilePart=0x0) returned 0x2e
	[0123.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0123.040] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\smdawq.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0123.040] GetFileType (hFile=0x2cc) returned 0x1
	[0123.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0123.040] GetFileType (hFile=0x2cc) returned 0x1
	[0123.040] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x680a
	[0123.040] ReadFile (in: hFile=0x2cc, lpBuffer=0x29ae574, nNumberOfBytesToRead=0x680a, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x29ae574*, lpNumberOfBytesRead=0xafe928*=0x680a, lpOverlapped=0x0) returned 1
	[0123.042] CloseHandle (hObject=0x2cc) returned 1
	[0123.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0123.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0123.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0123.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0123.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0123.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls", lpFilePart=0x0) returned 0x2e
	[0123.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0123.260] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\smdawq.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0123.263] GetFileType (hFile=0x2cc) returned 0x1
	[0123.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0123.264] GetFileType (hFile=0x2cc) returned 0x1
	[0123.264] WriteFile (in: hFile=0x2cc, lpBuffer=0x2a1bbb0*, nNumberOfBytesToWrite=0x6810, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2a1bbb0*, lpNumberOfBytesWritten=0xafe91c*=0x6810, lpOverlapped=0x0) returned 1
	[0123.267] CloseHandle (hObject=0x2cc) returned 1
	[0123.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0123.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls", lpFilePart=0x0) returned 0x2e
	[0123.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0123.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls.rogue", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls.rogue", lpFilePart=0x0) returned 0x34
	[0123.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0123.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\smdawq.xls"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ccde00, ftCreationTime.dwHighDateTime=0x1d5ecd6, ftLastAccessTime.dwLowDateTime=0xf875bb70, ftLastAccessTime.dwHighDateTime=0x1d5e48b, ftLastWriteTime.dwLowDateTime=0xaabc9285, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x6810)) returned 1
	[0123.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0123.273] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\smdawq.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\SMdawQ.xls.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\smdawq.xls.rogue")) returned 1
	[0123.274] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37
	[0123.274] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc", nBufferLength=0x37, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc", lpFilePart=0x0) returned 0x36
	[0123.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0123.274] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\ta37ax03j 25r5.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0123.274] GetFileType (hFile=0x2cc) returned 0x1
	[0123.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0123.274] GetFileType (hFile=0x2cc) returned 0x1
	[0123.274] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0xc8b9
	[0123.274] ReadFile (in: hFile=0x2cc, lpBuffer=0x2a2262c, nNumberOfBytesToRead=0xc8b9, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2a2262c*, lpNumberOfBytesRead=0xafe928*=0xc8b9, lpOverlapped=0x0) returned 1
	[0123.276] CloseHandle (hObject=0x2cc) returned 1
	[0123.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0123.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0123.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0123.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0123.507] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37
	[0123.507] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc", nBufferLength=0x37, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc", lpFilePart=0x0) returned 0x36
	[0123.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0123.508] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\ta37ax03j 25r5.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0123.520] GetFileType (hFile=0x2cc) returned 0x1
	[0123.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0123.521] GetFileType (hFile=0x2cc) returned 0x1
	[0123.521] WriteFile (in: hFile=0x2cc, lpBuffer=0x2a94e6c*, nNumberOfBytesToWrite=0xc8c0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2a94e6c*, lpNumberOfBytesWritten=0xafe91c*=0xc8c0, lpOverlapped=0x0) returned 1
	[0123.523] CloseHandle (hObject=0x2cc) returned 1
	[0123.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37
	[0123.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc", nBufferLength=0x37, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc", lpFilePart=0x0) returned 0x36
	[0123.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d
	[0123.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc.rogue", nBufferLength=0x3d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc.rogue", lpFilePart=0x0) returned 0x3c
	[0123.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0123.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\ta37ax03j 25r5.doc"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4425fc0, ftCreationTime.dwHighDateTime=0x1d5e618, ftLastAccessTime.dwLowDateTime=0xa13a5e80, ftLastAccessTime.dwHighDateTime=0x1d5eb91, ftLastWriteTime.dwLowDateTime=0xaae2ba52, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xc8c0)) returned 1
	[0123.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0123.554] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\ta37ax03j 25r5.doc"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\TA37aX03J 25R5.doc.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\ta37ax03j 25r5.doc.rogue")) returned 1
	[0123.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0123.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg", lpFilePart=0x0) returned 0x35
	[0123.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0123.587] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\wuotymcdxwbtj.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2cc
	[0123.587] GetFileType (hFile=0x2cc) returned 0x1
	[0123.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0123.587] GetFileType (hFile=0x2cc) returned 0x1
	[0123.587] GetFileSize (in: hFile=0x2cc, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x10e2e
	[0123.587] ReadFile (in: hFile=0x2cc, lpBuffer=0x2aa19e4, nNumberOfBytesToRead=0x10e2e, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2aa19e4*, lpNumberOfBytesRead=0xafe928*=0x10e2e, lpOverlapped=0x0) returned 1
	[0123.588] CloseHandle (hObject=0x2cc) returned 1
	[0123.721] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0123.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0123.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0123.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0123.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0123.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg", lpFilePart=0x0) returned 0x35
	[0123.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0123.723] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\wuotymcdxwbtj.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0123.733] GetFileType (hFile=0x2ec) returned 0x1
	[0123.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0123.734] GetFileType (hFile=0x2ec) returned 0x1
	[0123.734] WriteFile (in: hFile=0x2ec, lpBuffer=0x29419e8*, nNumberOfBytesToWrite=0x10e30, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x29419e8*, lpNumberOfBytesWritten=0xafe91c*=0x10e30, lpOverlapped=0x0) returned 1
	[0123.736] CloseHandle (hObject=0x2ec) returned 1
	[0123.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0123.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg", lpFilePart=0x0) returned 0x35
	[0123.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c
	[0123.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg.rogue", nBufferLength=0x3c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg.rogue", lpFilePart=0x0) returned 0x3b
	[0123.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0123.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\wuotymcdxwbtj.jpg"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4d62f0, ftCreationTime.dwHighDateTime=0x1d5ec4d, ftLastAccessTime.dwLowDateTime=0x5b3917d0, ftLastAccessTime.dwHighDateTime=0x1d5ece2, ftLastWriteTime.dwLowDateTime=0xab041f25, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x10e30)) returned 1
	[0123.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0123.768] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\wuotymcdxwbtj.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\wUOtYmcDXwbtj.jpg.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\wuotymcdxwbtj.jpg.rogue")) returned 1
	[0123.790] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0123.790] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png", lpFilePart=0x0) returned 0x33
	[0123.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0123.791] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\xpwx9x7hcnv.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0123.791] GetFileType (hFile=0x2ec) returned 0x1
	[0123.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0123.791] GetFileType (hFile=0x2ec) returned 0x1
	[0123.791] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x38ed
	[0123.791] ReadFile (in: hFile=0x2ec, lpBuffer=0x2952a94, nNumberOfBytesToRead=0x38ed, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2952a94*, lpNumberOfBytesRead=0xafe928*=0x38ed, lpOverlapped=0x0) returned 1
	[0123.795] CloseHandle (hObject=0x2ec) returned 1
	[0123.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0123.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0123.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0123.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0123.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0123.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png", lpFilePart=0x0) returned 0x33
	[0123.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0123.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\xpwx9x7hcnv.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0123.951] GetFileType (hFile=0x2ec) returned 0x1
	[0123.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0123.951] GetFileType (hFile=0x2ec) returned 0x1
	[0123.952] WriteFile (in: hFile=0x2ec, lpBuffer=0x29b168c*, nNumberOfBytesToWrite=0x38f0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x29b168c*, lpNumberOfBytesWritten=0xafe91c*=0x38f0, lpOverlapped=0x0) returned 1
	[0123.953] CloseHandle (hObject=0x2ec) returned 1
	[0123.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0123.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png", lpFilePart=0x0) returned 0x33
	[0123.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0123.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png.rogue", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png.rogue", lpFilePart=0x0) returned 0x39
	[0123.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0123.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\xpwx9x7hcnv.png"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc44700, ftCreationTime.dwHighDateTime=0x1d5e2da, ftLastAccessTime.dwLowDateTime=0xd9480cc0, ftLastAccessTime.dwHighDateTime=0x1d5eb26, ftLastWriteTime.dwLowDateTime=0xab257daf, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x38f0)) returned 1
	[0123.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0123.971] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\xpwx9x7hcnv.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\XpWX9X7HcnV.png.rogue" (normalized: "c:\\users\\fd1hvy\\desktop\\mm3ahaoewto\\xpwx9x7hcnv.png.rogue")) returned 1
	[0123.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0123.994] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x16
	[0123.994] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links", nBufferLength=0x16, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links", lpFilePart=0x0) returned 0x15
	[0123.994] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d5c0
	[0123.995] FindNextFileW (in: hFindFile=0xd9d5c0, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.999] FindNextFileW (in: hFindFile=0xd9d5c0, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcee4480b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0123.999] FindNextFileW (in: hFindFile=0xd9d5c0, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce90d59d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
	[0123.999] FindNextFileW (in: hFindFile=0xd9d5c0, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcec7abde, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
	[0124.000] FindNextFileW (in: hFindFile=0xd9d5c0, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1
	[0124.000] FindNextFileW (in: hFindFile=0xd9d5c0, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0124.000] FindClose (in: hFindFile=0xd9d5c0 | out: hFindFile=0xd9d5c0) returned 1
	[0124.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0124.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0124.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0124.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x16
	[0124.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links", nBufferLength=0x16, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links", lpFilePart=0x0) returned 0x15
	[0124.001] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d680
	[0124.001] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.002] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcee4480b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0124.002] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce90d59d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
	[0124.003] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcec7abde, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
	[0124.003] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1
	[0124.003] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 0
	[0124.003] FindClose (in: hFindFile=0xd9d680 | out: hFindFile=0xd9d680) returned 1
	[0124.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0124.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0124.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x22
	[0124.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", nBufferLength=0x22, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x21
	[0124.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0124.004] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0124.005] GetFileType (hFile=0x2ec) returned 0x1
	[0124.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0124.005] GetFileType (hFile=0x2ec) returned 0x1
	[0124.005] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x1f5
	[0124.006] ReadFile (in: hFile=0x2ec, lpBuffer=0x29b6514, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x29b6514*, lpNumberOfBytesRead=0xafe99c*=0x1f5, lpOverlapped=0x0) returned 1
	[0124.007] CloseHandle (hObject=0x2ec) returned 1
	[0124.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0124.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0124.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0124.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0124.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0124.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x22
	[0124.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", nBufferLength=0x22, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x21
	[0124.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0124.134] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0124.136] GetFileType (hFile=0x2ec) returned 0x1
	[0124.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0124.137] GetFileType (hFile=0x2ec) returned 0x1
	[0124.137] WriteFile (in: hFile=0x2ec, lpBuffer=0x2a04e54*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0xafe964, lpOverlapped=0x0 | out: lpBuffer=0x2a04e54*, lpNumberOfBytesWritten=0xafe964*=0x200, lpOverlapped=0x0) returned 1
	[0124.138] CloseHandle (hObject=0x2ec) returned 1
	[0124.142] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x22
	[0124.142] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", nBufferLength=0x22, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x21
	[0124.142] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0124.143] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk.rogue", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Desktop.lnk.rogue", lpFilePart=0x0) returned 0x27
	[0124.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0124.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xab4219ef, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1
	[0124.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0124.143] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk.rogue" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk.rogue")) returned 1
	[0124.144] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0124.144] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x23
	[0124.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0124.144] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0124.145] GetFileType (hFile=0x2ec) returned 0x1
	[0124.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0124.145] GetFileType (hFile=0x2ec) returned 0x1
	[0124.145] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x3ae
	[0124.145] ReadFile (in: hFile=0x2ec, lpBuffer=0x2a06314, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a06314*, lpNumberOfBytesRead=0xafe99c*=0x3ae, lpOverlapped=0x0) returned 1
	[0124.148] CloseHandle (hObject=0x2ec) returned 1
	[0124.231] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0124.231] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0124.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0124.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0124.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0124.232] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0124.232] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x23
	[0124.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0124.232] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0124.233] GetFileType (hFile=0x2ec) returned 0x1
	[0124.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0124.234] GetFileType (hFile=0x2ec) returned 0x1
	[0124.234] WriteFile (in: hFile=0x2ec, lpBuffer=0x2a554c0*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0xafe964, lpOverlapped=0x0 | out: lpBuffer=0x2a554c0*, lpNumberOfBytesWritten=0xafe964*=0x3b0, lpOverlapped=0x0) returned 1
	[0124.235] CloseHandle (hObject=0x2ec) returned 1
	[0124.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0124.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x23
	[0124.237] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0124.237] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk.rogue", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Downloads.lnk.rogue", lpFilePart=0x0) returned 0x29
	[0124.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0124.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xab5071fb, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1
	[0124.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0124.237] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk.rogue" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk.rogue")) returned 1
	[0124.238] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23
	[0124.238] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", nBufferLength=0x23, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", lpFilePart=0x0) returned 0x22
	[0124.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0124.239] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0124.240] GetFileType (hFile=0x2ec) returned 0x1
	[0124.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0124.240] GetFileType (hFile=0x2ec) returned 0x1
	[0124.240] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x53a
	[0124.240] ReadFile (in: hFile=0x2ec, lpBuffer=0x2a56b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a56b10*, lpNumberOfBytesRead=0xafe99c*=0x53a, lpOverlapped=0x0) returned 1
	[0124.242] CloseHandle (hObject=0x2ec) returned 1
	[0124.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0124.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0124.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0124.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0124.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0124.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23
	[0124.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", nBufferLength=0x23, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", lpFilePart=0x0) returned 0x22
	[0124.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0124.367] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0124.368] GetFileType (hFile=0x2ec) returned 0x1
	[0124.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0124.368] GetFileType (hFile=0x2ec) returned 0x1
	[0124.368] WriteFile (in: hFile=0x2ec, lpBuffer=0x2aa6490*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0xafe964, lpOverlapped=0x0 | out: lpBuffer=0x2aa6490*, lpNumberOfBytesWritten=0xafe964*=0x540, lpOverlapped=0x0) returned 1
	[0124.369] CloseHandle (hObject=0x2ec) returned 1
	[0124.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23
	[0124.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", nBufferLength=0x23, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", lpFilePart=0x0) returned 0x22
	[0124.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29
	[0124.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk.rogue", nBufferLength=0x29, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk.rogue", lpFilePart=0x0) returned 0x28
	[0124.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0124.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xab637b54, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1
	[0124.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0124.372] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk"), lpNewFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk.rogue" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk.rogue")) returned 1
	[0124.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0124.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19
	[0124.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts", nBufferLength=0x19, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Contacts", lpFilePart=0x0) returned 0x18
	[0124.375] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d680
	[0124.375] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.376] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0124.376] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0124.377] FindClose (in: hFindFile=0xd9d680 | out: hFindFile=0xd9d680) returned 1
	[0124.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0124.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0124.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0124.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19
	[0124.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts", nBufferLength=0x19, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Contacts", lpFilePart=0x0) returned 0x18
	[0124.378] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d680
	[0124.378] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.379] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0124.379] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0124.380] FindClose (in: hFindFile=0xd9d680 | out: hFindFile=0xd9d680) returned 1
	[0124.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0124.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0124.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0124.380] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x18
	[0124.381] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x18, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
	[0124.381] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa9e13df5, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xa9e13df5, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d680
	[0124.382] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa9e13df5, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xa9e13df5, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.382] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fb5760, ftCreationTime.dwHighDateTime=0x1d5eea7, ftLastAccessTime.dwLowDateTime=0x34319930, ftLastAccessTime.dwHighDateTime=0x1d5e785, ftLastWriteTime.dwLowDateTime=0xa72a060b, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-UiNR9TB1IHsrJ.csv.rogue", cAlternateFileName="-UINR9~1.ROG")) returned 1
	[0124.383] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd02a1420, ftCreationTime.dwHighDateTime=0x1d5e18b, ftLastAccessTime.dwLowDateTime=0x3b1551a0, ftLastAccessTime.dwHighDateTime=0x1d5e31c, ftLastWriteTime.dwLowDateTime=0xa74e7736, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="1x 7HEmPpq80rc57.jpg.rogue", cAlternateFileName="1X7HEM~1.ROG")) returned 1
	[0124.383] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe055da40, ftCreationTime.dwHighDateTime=0x1d5e6f0, ftLastAccessTime.dwLowDateTime=0x65897e80, ftLastAccessTime.dwHighDateTime=0x1d5ecd0, ftLastWriteTime.dwLowDateTime=0xa77650e1, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xaea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4j6zdyfIWuAdIxo.mp3.rogue", cAlternateFileName="4J6ZDY~1.ROG")) returned 1
	[0124.383] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda697d70, ftCreationTime.dwHighDateTime=0x1d5e282, ftLastAccessTime.dwLowDateTime=0x7959200, ftLastAccessTime.dwHighDateTime=0x1d5e51e, ftLastWriteTime.dwLowDateTime=0xa7a14493, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x6950, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ju36F9C.jpg.rogue", cAlternateFileName="5JU36F~1.ROG")) returned 1
	[0124.384] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3be760, ftCreationTime.dwHighDateTime=0x1d5ee2e, ftLastAccessTime.dwLowDateTime=0x4f346570, ftLastAccessTime.dwHighDateTime=0x1d5e896, ftLastWriteTime.dwLowDateTime=0xa7af89a6, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xd5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5yz93b622bSpRnho9w.avi.rogue", cAlternateFileName="5YZ93B~1.ROG")) returned 1
	[0124.384] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38aaf50, ftCreationTime.dwHighDateTime=0x1d5ea88, ftLastAccessTime.dwLowDateTime=0x4e5e8660, ftLastAccessTime.dwHighDateTime=0x1d5e118, ftLastWriteTime.dwLowDateTime=0xa7c3d601, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xc7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="b1Gx75LQIbL3.avi.rogue", cAlternateFileName="B1GX75~1.ROG")) returned 1
	[0124.384] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9e3b130, ftCreationTime.dwHighDateTime=0x1d5ec7e, ftLastAccessTime.dwLowDateTime=0xea601430, ftLastAccessTime.dwHighDateTime=0x1d5e6b2, ftLastWriteTime.dwLowDateTime=0xa7d6eb29, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x18710, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3PP9q0NJjQZz68vcJxQ.pdf.rogue", cAlternateFileName="C3PP9Q~1.ROG")) returned 1
	[0124.385] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d331e0, ftCreationTime.dwHighDateTime=0x1d5e227, ftLastAccessTime.dwLowDateTime=0xf3396d20, ftLastAccessTime.dwHighDateTime=0x1d5e330, ftLastWriteTime.dwLowDateTime=0xa7ec6128, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x10ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C8lLIrwchw.mp3.rogue", cAlternateFileName="C8LLIR~1.ROG")) returned 1
	[0124.385] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26963c00, ftCreationTime.dwHighDateTime=0x1d5e19e, ftLastAccessTime.dwLowDateTime=0x19bdb1f0, ftLastAccessTime.dwHighDateTime=0x1d5e1ff, ftLastWriteTime.dwLowDateTime=0xa80b87d9, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x17a20, dwReserved0=0x0, dwReserved1=0x0, cFileName="d0pi2c.xls.rogue", cAlternateFileName="D0PI2C~1.ROG")) returned 1
	[0124.385] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0124.385] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bb1490, ftCreationTime.dwHighDateTime=0x1d5ef95, ftLastAccessTime.dwLowDateTime=0x4090000, ftLastAccessTime.dwHighDateTime=0x1d5e6b7, ftLastWriteTime.dwLowDateTime=0xa83fd31e, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x15590, dwReserved0=0x0, dwReserved1=0x0, cFileName="E5x7t 1VGFZzn2OlE.mp4.rogue", cAlternateFileName="E5X7T1~1.ROG")) returned 1
	[0124.386] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89910860, ftCreationTime.dwHighDateTime=0x1d5e80d, ftLastAccessTime.dwLowDateTime=0x1e3936d0, ftLastAccessTime.dwHighDateTime=0x1d5e553, ftLastWriteTime.dwLowDateTime=0x1e3936d0, ftLastWriteTime.dwHighDateTime=0x1d5e553, nFileSizeHigh=0x0, nFileSizeLow=0x15249, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESaXfyqQyo_eTfa_.gif", cAlternateFileName="ESAXFY~1.GIF")) returned 1
	[0124.390] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10becb90, ftCreationTime.dwHighDateTime=0x1d5edc4, ftLastAccessTime.dwLowDateTime=0x4e438a00, ftLastAccessTime.dwHighDateTime=0x1d5ebfd, ftLastWriteTime.dwLowDateTime=0xa857a779, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x17a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="F_rpYNSkdXLR42Xr.mp3.rogue", cAlternateFileName="F_RPYN~1.ROG")) returned 1
	[0124.390] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ec45a20, ftCreationTime.dwHighDateTime=0x1d5f08e, ftLastAccessTime.dwLowDateTime=0x13906340, ftLastAccessTime.dwHighDateTime=0x1d5f113, ftLastWriteTime.dwLowDateTime=0x13906340, ftLastWriteTime.dwHighDateTime=0x1d5f113, nFileSizeHigh=0x0, nFileSizeLow=0x16e3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="gCiDO8Sx.pps", cAlternateFileName="")) returned 1
	[0124.390] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c85d570, ftCreationTime.dwHighDateTime=0x1d5ee8a, ftLastAccessTime.dwLowDateTime=0x8fb3ffc0, ftLastAccessTime.dwHighDateTime=0x1d5ef53, ftLastWriteTime.dwLowDateTime=0x8fb3ffc0, ftLastWriteTime.dwHighDateTime=0x1d5ef53, nFileSizeHigh=0x0, nFileSizeLow=0x6b53, dwReserved0=0x0, dwReserved1=0x0, cFileName="hqBdemWhu2I.pps", cAlternateFileName="HQBDEM~1.PPS")) returned 1
	[0124.390] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd20ccdd0, ftCreationTime.dwHighDateTime=0x1d5ecc3, ftLastAccessTime.dwLowDateTime=0x3df4e140, ftLastAccessTime.dwHighDateTime=0x1d5e274, ftLastWriteTime.dwLowDateTime=0x3df4e140, ftLastWriteTime.dwHighDateTime=0x1d5e274, nFileSizeHigh=0x0, nFileSizeLow=0xb73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hTGDeLLF20kAtJdc.m4a", cAlternateFileName="HTGDEL~1.M4A")) returned 1
	[0124.391] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b02670, ftCreationTime.dwHighDateTime=0x1d5ee3e, ftLastAccessTime.dwLowDateTime=0xe28d90f0, ftLastAccessTime.dwHighDateTime=0x1d5eb05, ftLastWriteTime.dwLowDateTime=0xe28d90f0, ftLastWriteTime.dwHighDateTime=0x1d5eb05, nFileSizeHigh=0x0, nFileSizeLow=0x1808b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IgQCk0MAorOokm1kXx8k.swf", cAlternateFileName="IGQCK0~1.SWF")) returned 1
	[0124.391] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937a1950, ftCreationTime.dwHighDateTime=0x1d5e65c, ftLastAccessTime.dwLowDateTime=0x383473e0, ftLastAccessTime.dwHighDateTime=0x1d5e9e2, ftLastWriteTime.dwLowDateTime=0xa871e29e, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xc140, dwReserved0=0x0, dwReserved1=0x0, cFileName="JZ9KqhlxFnP.odt.rogue", cAlternateFileName="JZ9KQH~1.ROG")) returned 1
	[0124.391] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17f33d10, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0xf9de7530, ftLastAccessTime.dwHighDateTime=0x1d5ebc8, ftLastWriteTime.dwLowDateTime=0xf9de7530, ftLastWriteTime.dwHighDateTime=0x1d5ebc8, nFileSizeHigh=0x0, nFileSizeLow=0x15ed5, dwReserved0=0x0, dwReserved1=0x0, cFileName="KbWvD.ots", cAlternateFileName="")) returned 1
	[0124.391] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedf8f870, ftCreationTime.dwHighDateTime=0x1d5e33b, ftLastAccessTime.dwLowDateTime=0x65bbeea0, ftLastAccessTime.dwHighDateTime=0x1d5e0e7, ftLastWriteTime.dwLowDateTime=0x65bbeea0, ftLastWriteTime.dwHighDateTime=0x1d5e0e7, nFileSizeHigh=0x0, nFileSizeLow=0x14993, dwReserved0=0x0, dwReserved1=0x0, cFileName="knA_nHwW5W9.swf", cAlternateFileName="KNA_NH~1.SWF")) returned 1
	[0124.392] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd61850, ftCreationTime.dwHighDateTime=0x1d5e207, ftLastAccessTime.dwLowDateTime=0xb50967f0, ftLastAccessTime.dwHighDateTime=0x1d5eaf4, ftLastWriteTime.dwLowDateTime=0xa88c42d9, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYHaY30ju.odt.rogue", cAlternateFileName="LYHAY3~1.ROG")) returned 1
	[0124.392] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418729e0, ftCreationTime.dwHighDateTime=0x1d5e881, ftLastAccessTime.dwLowDateTime=0xf1ea2530, ftLastAccessTime.dwHighDateTime=0x1d5f033, ftLastWriteTime.dwLowDateTime=0xa8a8e8ad, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x2630, dwReserved0=0x0, dwReserved1=0x0, cFileName="mj-_XqsOUTRx7pT0e.jpg.rogue", cAlternateFileName="MJ-_XQ~1.ROG")) returned 1
	[0124.392] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84633f90, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0xab27e008, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xab27e008, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mm3aHAOeWto", cAlternateFileName="MM3AHA~1")) returned 1
	[0124.393] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6aab60, ftCreationTime.dwHighDateTime=0x1d5e325, ftLastAccessTime.dwLowDateTime=0x4f7b5af0, ftLastAccessTime.dwHighDateTime=0x1d5e811, ftLastWriteTime.dwLowDateTime=0xa8b9996c, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x18900, dwReserved0=0x0, dwReserved1=0x0, cFileName="MNd8.mp3.rogue", cAlternateFileName="MND8MP~1.ROG")) returned 1
	[0124.393] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a99bce0, ftCreationTime.dwHighDateTime=0x1d5e7ac, ftLastAccessTime.dwLowDateTime=0x682cd4f0, ftLastAccessTime.dwHighDateTime=0x1d5e584, ftLastWriteTime.dwLowDateTime=0xa919b87c, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x105b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsCcuUbl0D9hBva9o-Gb.xls.rogue", cAlternateFileName="MSCCUU~1.ROG")) returned 1
	[0124.393] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316feea0, ftCreationTime.dwHighDateTime=0x1d5e0d6, ftLastAccessTime.dwLowDateTime=0x169e2b0, ftLastAccessTime.dwHighDateTime=0x1d5ec6b, ftLastWriteTime.dwLowDateTime=0x169e2b0, ftLastWriteTime.dwHighDateTime=0x1d5ec6b, nFileSizeHigh=0x0, nFileSizeLow=0x9feb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngCAG3Lf.m4a", cAlternateFileName="")) returned 1
	[0124.393] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bcdb60, ftCreationTime.dwHighDateTime=0x1d5e1d4, ftLastAccessTime.dwLowDateTime=0x2818d0f0, ftLastAccessTime.dwHighDateTime=0x1d5ecad, ftLastWriteTime.dwLowDateTime=0xa9359377, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x8ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="O6p NRcFtjyQ0R2.mkv.rogue", cAlternateFileName="O6PNRC~1.ROG")) returned 1
	[0124.393] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6718d500, ftCreationTime.dwHighDateTime=0x1d5e615, ftLastAccessTime.dwLowDateTime=0x415a8400, ftLastAccessTime.dwHighDateTime=0x1d5ec44, ftLastWriteTime.dwLowDateTime=0xa948a595, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x11490, dwReserved0=0x0, dwReserved1=0x0, cFileName="pJpxx4-5_-Ff-0ern.mp3.rogue", cAlternateFileName="PJPXX4~1.ROG")) returned 1
	[0124.394] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa678b9d0, ftCreationTime.dwHighDateTime=0x1d5e774, ftLastAccessTime.dwLowDateTime=0xfd12a7c0, ftLastAccessTime.dwHighDateTime=0x1d5eb10, ftLastWriteTime.dwLowDateTime=0xa95bb8ae, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x13a10, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPBZxZ.mkv.rogue", cAlternateFileName="PPBZXZ~1.ROG")) returned 1
	[0124.394] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5712e40, ftCreationTime.dwHighDateTime=0x1d5e39e, ftLastAccessTime.dwLowDateTime=0xeb29bbf0, ftLastAccessTime.dwHighDateTime=0x1d5efa9, ftLastWriteTime.dwLowDateTime=0xa975f653, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x94f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pZpfWsYWRe.pdf.rogue", cAlternateFileName="PZPFWS~1.ROG")) returned 1
	[0124.394] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1662d720, ftCreationTime.dwHighDateTime=0x1d5eff5, ftLastAccessTime.dwLowDateTime=0x7eff8b50, ftLastAccessTime.dwHighDateTime=0x1d5e11f, ftLastWriteTime.dwLowDateTime=0xa9b190b1, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x161a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q2k R_LJCrLq0.bmp.rogue", cAlternateFileName="Q2KR_L~1.ROG")) returned 1
	[0124.394] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94a7b240, ftCreationTime.dwHighDateTime=0x1d5eebf, ftLastAccessTime.dwLowDateTime=0xbe0d9f80, ftLastAccessTime.dwHighDateTime=0x1d5eba6, ftLastWriteTime.dwLowDateTime=0xa9d2ee76, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xbef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wbD6Jpp1VpuBL6f.pdf.rogue", cAlternateFileName="WBD6JP~1.ROG")) returned 1
	[0124.395] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1811130, ftCreationTime.dwHighDateTime=0x1d5e252, ftLastAccessTime.dwLowDateTime=0xe9a671a0, ftLastAccessTime.dwHighDateTime=0x1d5f0f9, ftLastWriteTime.dwLowDateTime=0xe9a671a0, ftLastWriteTime.dwHighDateTime=0x1d5f0f9, nFileSizeHigh=0x0, nFileSizeLow=0x18ed7, dwReserved0=0x0, dwReserved1=0x0, cFileName="XnZS-qtTFQpWGv.swf", cAlternateFileName="XNZS-Q~1.SWF")) returned 1
	[0124.395] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee8c680, ftCreationTime.dwHighDateTime=0x1d5e2b5, ftLastAccessTime.dwLowDateTime=0xa00581c0, ftLastAccessTime.dwHighDateTime=0x1d5ec72, ftLastWriteTime.dwLowDateTime=0xa9e13df5, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x6e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="YENM3XHoRa 9Bl8.avi.rogue", cAlternateFileName="YENM3X~1.ROG")) returned 1
	[0124.395] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8574a50, ftCreationTime.dwHighDateTime=0x1d5e16c, ftLastAccessTime.dwLowDateTime=0x338539c0, ftLastAccessTime.dwHighDateTime=0x1d5e4aa, ftLastWriteTime.dwLowDateTime=0x338539c0, ftLastWriteTime.dwHighDateTime=0x1d5e4aa, nFileSizeHigh=0x0, nFileSizeLow=0xfc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="yJZvE.ots", cAlternateFileName="")) returned 1
	[0124.395] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0124.395] FindClose (in: hFindFile=0xd9d680 | out: hFindFile=0xd9d680) returned 1
	[0124.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0124.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0124.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0124.396] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x18
	[0124.396] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x18, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17
	[0124.396] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa9e13df5, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xa9e13df5, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d680
	[0124.396] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa9e13df5, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xa9e13df5, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.396] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fb5760, ftCreationTime.dwHighDateTime=0x1d5eea7, ftLastAccessTime.dwLowDateTime=0x34319930, ftLastAccessTime.dwHighDateTime=0x1d5e785, ftLastWriteTime.dwLowDateTime=0xa72a060b, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-UiNR9TB1IHsrJ.csv.rogue", cAlternateFileName="-UINR9~1.ROG")) returned 1
	[0124.397] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd02a1420, ftCreationTime.dwHighDateTime=0x1d5e18b, ftLastAccessTime.dwLowDateTime=0x3b1551a0, ftLastAccessTime.dwHighDateTime=0x1d5e31c, ftLastWriteTime.dwLowDateTime=0xa74e7736, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="1x 7HEmPpq80rc57.jpg.rogue", cAlternateFileName="1X7HEM~1.ROG")) returned 1
	[0124.397] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe055da40, ftCreationTime.dwHighDateTime=0x1d5e6f0, ftLastAccessTime.dwLowDateTime=0x65897e80, ftLastAccessTime.dwHighDateTime=0x1d5ecd0, ftLastWriteTime.dwLowDateTime=0xa77650e1, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xaea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4j6zdyfIWuAdIxo.mp3.rogue", cAlternateFileName="4J6ZDY~1.ROG")) returned 1
	[0124.397] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda697d70, ftCreationTime.dwHighDateTime=0x1d5e282, ftLastAccessTime.dwLowDateTime=0x7959200, ftLastAccessTime.dwHighDateTime=0x1d5e51e, ftLastWriteTime.dwLowDateTime=0xa7a14493, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x6950, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ju36F9C.jpg.rogue", cAlternateFileName="5JU36F~1.ROG")) returned 1
	[0124.398] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3be760, ftCreationTime.dwHighDateTime=0x1d5ee2e, ftLastAccessTime.dwLowDateTime=0x4f346570, ftLastAccessTime.dwHighDateTime=0x1d5e896, ftLastWriteTime.dwLowDateTime=0xa7af89a6, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xd5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5yz93b622bSpRnho9w.avi.rogue", cAlternateFileName="5YZ93B~1.ROG")) returned 1
	[0124.398] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38aaf50, ftCreationTime.dwHighDateTime=0x1d5ea88, ftLastAccessTime.dwLowDateTime=0x4e5e8660, ftLastAccessTime.dwHighDateTime=0x1d5e118, ftLastWriteTime.dwLowDateTime=0xa7c3d601, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xc7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="b1Gx75LQIbL3.avi.rogue", cAlternateFileName="B1GX75~1.ROG")) returned 1
	[0124.398] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9e3b130, ftCreationTime.dwHighDateTime=0x1d5ec7e, ftLastAccessTime.dwLowDateTime=0xea601430, ftLastAccessTime.dwHighDateTime=0x1d5e6b2, ftLastWriteTime.dwLowDateTime=0xa7d6eb29, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x18710, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3PP9q0NJjQZz68vcJxQ.pdf.rogue", cAlternateFileName="C3PP9Q~1.ROG")) returned 1
	[0124.398] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d331e0, ftCreationTime.dwHighDateTime=0x1d5e227, ftLastAccessTime.dwLowDateTime=0xf3396d20, ftLastAccessTime.dwHighDateTime=0x1d5e330, ftLastWriteTime.dwLowDateTime=0xa7ec6128, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x10ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C8lLIrwchw.mp3.rogue", cAlternateFileName="C8LLIR~1.ROG")) returned 1
	[0124.399] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26963c00, ftCreationTime.dwHighDateTime=0x1d5e19e, ftLastAccessTime.dwLowDateTime=0x19bdb1f0, ftLastAccessTime.dwHighDateTime=0x1d5e1ff, ftLastWriteTime.dwLowDateTime=0xa80b87d9, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x17a20, dwReserved0=0x0, dwReserved1=0x0, cFileName="d0pi2c.xls.rogue", cAlternateFileName="D0PI2C~1.ROG")) returned 1
	[0124.399] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0124.399] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bb1490, ftCreationTime.dwHighDateTime=0x1d5ef95, ftLastAccessTime.dwLowDateTime=0x4090000, ftLastAccessTime.dwHighDateTime=0x1d5e6b7, ftLastWriteTime.dwLowDateTime=0xa83fd31e, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x15590, dwReserved0=0x0, dwReserved1=0x0, cFileName="E5x7t 1VGFZzn2OlE.mp4.rogue", cAlternateFileName="E5X7T1~1.ROG")) returned 1
	[0124.399] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89910860, ftCreationTime.dwHighDateTime=0x1d5e80d, ftLastAccessTime.dwLowDateTime=0x1e3936d0, ftLastAccessTime.dwHighDateTime=0x1d5e553, ftLastWriteTime.dwLowDateTime=0x1e3936d0, ftLastWriteTime.dwHighDateTime=0x1d5e553, nFileSizeHigh=0x0, nFileSizeLow=0x15249, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESaXfyqQyo_eTfa_.gif", cAlternateFileName="ESAXFY~1.GIF")) returned 1
	[0124.400] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10becb90, ftCreationTime.dwHighDateTime=0x1d5edc4, ftLastAccessTime.dwLowDateTime=0x4e438a00, ftLastAccessTime.dwHighDateTime=0x1d5ebfd, ftLastWriteTime.dwLowDateTime=0xa857a779, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x17a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="F_rpYNSkdXLR42Xr.mp3.rogue", cAlternateFileName="F_RPYN~1.ROG")) returned 1
	[0124.400] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ec45a20, ftCreationTime.dwHighDateTime=0x1d5f08e, ftLastAccessTime.dwLowDateTime=0x13906340, ftLastAccessTime.dwHighDateTime=0x1d5f113, ftLastWriteTime.dwLowDateTime=0x13906340, ftLastWriteTime.dwHighDateTime=0x1d5f113, nFileSizeHigh=0x0, nFileSizeLow=0x16e3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="gCiDO8Sx.pps", cAlternateFileName="")) returned 1
	[0124.400] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c85d570, ftCreationTime.dwHighDateTime=0x1d5ee8a, ftLastAccessTime.dwLowDateTime=0x8fb3ffc0, ftLastAccessTime.dwHighDateTime=0x1d5ef53, ftLastWriteTime.dwLowDateTime=0x8fb3ffc0, ftLastWriteTime.dwHighDateTime=0x1d5ef53, nFileSizeHigh=0x0, nFileSizeLow=0x6b53, dwReserved0=0x0, dwReserved1=0x0, cFileName="hqBdemWhu2I.pps", cAlternateFileName="HQBDEM~1.PPS")) returned 1
	[0124.401] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd20ccdd0, ftCreationTime.dwHighDateTime=0x1d5ecc3, ftLastAccessTime.dwLowDateTime=0x3df4e140, ftLastAccessTime.dwHighDateTime=0x1d5e274, ftLastWriteTime.dwLowDateTime=0x3df4e140, ftLastWriteTime.dwHighDateTime=0x1d5e274, nFileSizeHigh=0x0, nFileSizeLow=0xb73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hTGDeLLF20kAtJdc.m4a", cAlternateFileName="HTGDEL~1.M4A")) returned 1
	[0124.427] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b02670, ftCreationTime.dwHighDateTime=0x1d5ee3e, ftLastAccessTime.dwLowDateTime=0xe28d90f0, ftLastAccessTime.dwHighDateTime=0x1d5eb05, ftLastWriteTime.dwLowDateTime=0xe28d90f0, ftLastWriteTime.dwHighDateTime=0x1d5eb05, nFileSizeHigh=0x0, nFileSizeLow=0x1808b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IgQCk0MAorOokm1kXx8k.swf", cAlternateFileName="IGQCK0~1.SWF")) returned 1
	[0124.428] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937a1950, ftCreationTime.dwHighDateTime=0x1d5e65c, ftLastAccessTime.dwLowDateTime=0x383473e0, ftLastAccessTime.dwHighDateTime=0x1d5e9e2, ftLastWriteTime.dwLowDateTime=0xa871e29e, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xc140, dwReserved0=0x0, dwReserved1=0x0, cFileName="JZ9KqhlxFnP.odt.rogue", cAlternateFileName="JZ9KQH~1.ROG")) returned 1
	[0124.428] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17f33d10, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0xf9de7530, ftLastAccessTime.dwHighDateTime=0x1d5ebc8, ftLastWriteTime.dwLowDateTime=0xf9de7530, ftLastWriteTime.dwHighDateTime=0x1d5ebc8, nFileSizeHigh=0x0, nFileSizeLow=0x15ed5, dwReserved0=0x0, dwReserved1=0x0, cFileName="KbWvD.ots", cAlternateFileName="")) returned 1
	[0124.428] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedf8f870, ftCreationTime.dwHighDateTime=0x1d5e33b, ftLastAccessTime.dwLowDateTime=0x65bbeea0, ftLastAccessTime.dwHighDateTime=0x1d5e0e7, ftLastWriteTime.dwLowDateTime=0x65bbeea0, ftLastWriteTime.dwHighDateTime=0x1d5e0e7, nFileSizeHigh=0x0, nFileSizeLow=0x14993, dwReserved0=0x0, dwReserved1=0x0, cFileName="knA_nHwW5W9.swf", cAlternateFileName="KNA_NH~1.SWF")) returned 1
	[0124.428] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd61850, ftCreationTime.dwHighDateTime=0x1d5e207, ftLastAccessTime.dwLowDateTime=0xb50967f0, ftLastAccessTime.dwHighDateTime=0x1d5eaf4, ftLastWriteTime.dwLowDateTime=0xa88c42d9, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYHaY30ju.odt.rogue", cAlternateFileName="LYHAY3~1.ROG")) returned 1
	[0124.428] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418729e0, ftCreationTime.dwHighDateTime=0x1d5e881, ftLastAccessTime.dwLowDateTime=0xf1ea2530, ftLastAccessTime.dwHighDateTime=0x1d5f033, ftLastWriteTime.dwLowDateTime=0xa8a8e8ad, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x2630, dwReserved0=0x0, dwReserved1=0x0, cFileName="mj-_XqsOUTRx7pT0e.jpg.rogue", cAlternateFileName="MJ-_XQ~1.ROG")) returned 1
	[0124.429] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84633f90, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0xab27e008, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xab27e008, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mm3aHAOeWto", cAlternateFileName="MM3AHA~1")) returned 1
	[0124.429] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6aab60, ftCreationTime.dwHighDateTime=0x1d5e325, ftLastAccessTime.dwLowDateTime=0x4f7b5af0, ftLastAccessTime.dwHighDateTime=0x1d5e811, ftLastWriteTime.dwLowDateTime=0xa8b9996c, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x18900, dwReserved0=0x0, dwReserved1=0x0, cFileName="MNd8.mp3.rogue", cAlternateFileName="MND8MP~1.ROG")) returned 1
	[0124.429] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a99bce0, ftCreationTime.dwHighDateTime=0x1d5e7ac, ftLastAccessTime.dwLowDateTime=0x682cd4f0, ftLastAccessTime.dwHighDateTime=0x1d5e584, ftLastWriteTime.dwLowDateTime=0xa919b87c, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x105b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsCcuUbl0D9hBva9o-Gb.xls.rogue", cAlternateFileName="MSCCUU~1.ROG")) returned 1
	[0124.429] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316feea0, ftCreationTime.dwHighDateTime=0x1d5e0d6, ftLastAccessTime.dwLowDateTime=0x169e2b0, ftLastAccessTime.dwHighDateTime=0x1d5ec6b, ftLastWriteTime.dwLowDateTime=0x169e2b0, ftLastWriteTime.dwHighDateTime=0x1d5ec6b, nFileSizeHigh=0x0, nFileSizeLow=0x9feb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngCAG3Lf.m4a", cAlternateFileName="")) returned 1
	[0124.429] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bcdb60, ftCreationTime.dwHighDateTime=0x1d5e1d4, ftLastAccessTime.dwLowDateTime=0x2818d0f0, ftLastAccessTime.dwHighDateTime=0x1d5ecad, ftLastWriteTime.dwLowDateTime=0xa9359377, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x8ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="O6p NRcFtjyQ0R2.mkv.rogue", cAlternateFileName="O6PNRC~1.ROG")) returned 1
	[0124.430] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6718d500, ftCreationTime.dwHighDateTime=0x1d5e615, ftLastAccessTime.dwLowDateTime=0x415a8400, ftLastAccessTime.dwHighDateTime=0x1d5ec44, ftLastWriteTime.dwLowDateTime=0xa948a595, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x11490, dwReserved0=0x0, dwReserved1=0x0, cFileName="pJpxx4-5_-Ff-0ern.mp3.rogue", cAlternateFileName="PJPXX4~1.ROG")) returned 1
	[0124.430] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa678b9d0, ftCreationTime.dwHighDateTime=0x1d5e774, ftLastAccessTime.dwLowDateTime=0xfd12a7c0, ftLastAccessTime.dwHighDateTime=0x1d5eb10, ftLastWriteTime.dwLowDateTime=0xa95bb8ae, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x13a10, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPBZxZ.mkv.rogue", cAlternateFileName="PPBZXZ~1.ROG")) returned 1
	[0124.430] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5712e40, ftCreationTime.dwHighDateTime=0x1d5e39e, ftLastAccessTime.dwLowDateTime=0xeb29bbf0, ftLastAccessTime.dwHighDateTime=0x1d5efa9, ftLastWriteTime.dwLowDateTime=0xa975f653, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x94f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pZpfWsYWRe.pdf.rogue", cAlternateFileName="PZPFWS~1.ROG")) returned 1
	[0124.430] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1662d720, ftCreationTime.dwHighDateTime=0x1d5eff5, ftLastAccessTime.dwLowDateTime=0x7eff8b50, ftLastAccessTime.dwHighDateTime=0x1d5e11f, ftLastWriteTime.dwLowDateTime=0xa9b190b1, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x161a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q2k R_LJCrLq0.bmp.rogue", cAlternateFileName="Q2KR_L~1.ROG")) returned 1
	[0124.431] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94a7b240, ftCreationTime.dwHighDateTime=0x1d5eebf, ftLastAccessTime.dwLowDateTime=0xbe0d9f80, ftLastAccessTime.dwHighDateTime=0x1d5eba6, ftLastWriteTime.dwLowDateTime=0xa9d2ee76, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xbef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wbD6Jpp1VpuBL6f.pdf.rogue", cAlternateFileName="WBD6JP~1.ROG")) returned 1
	[0124.431] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1811130, ftCreationTime.dwHighDateTime=0x1d5e252, ftLastAccessTime.dwLowDateTime=0xe9a671a0, ftLastAccessTime.dwHighDateTime=0x1d5f0f9, ftLastWriteTime.dwLowDateTime=0xe9a671a0, ftLastWriteTime.dwHighDateTime=0x1d5f0f9, nFileSizeHigh=0x0, nFileSizeLow=0x18ed7, dwReserved0=0x0, dwReserved1=0x0, cFileName="XnZS-qtTFQpWGv.swf", cAlternateFileName="XNZS-Q~1.SWF")) returned 1
	[0124.431] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee8c680, ftCreationTime.dwHighDateTime=0x1d5e2b5, ftLastAccessTime.dwLowDateTime=0xa00581c0, ftLastAccessTime.dwHighDateTime=0x1d5ec72, ftLastWriteTime.dwLowDateTime=0xa9e13df5, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x6e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="YENM3XHoRa 9Bl8.avi.rogue", cAlternateFileName="YENM3X~1.ROG")) returned 1
	[0124.431] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8574a50, ftCreationTime.dwHighDateTime=0x1d5e16c, ftLastAccessTime.dwLowDateTime=0x338539c0, ftLastAccessTime.dwHighDateTime=0x1d5e4aa, ftLastWriteTime.dwLowDateTime=0x338539c0, ftLastWriteTime.dwHighDateTime=0x1d5e4aa, nFileSizeHigh=0x0, nFileSizeLow=0xfc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="yJZvE.ots", cAlternateFileName="")) returned 1
	[0124.432] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8574a50, ftCreationTime.dwHighDateTime=0x1d5e16c, ftLastAccessTime.dwLowDateTime=0x338539c0, ftLastAccessTime.dwHighDateTime=0x1d5e4aa, ftLastWriteTime.dwLowDateTime=0x338539c0, ftLastWriteTime.dwHighDateTime=0x1d5e4aa, nFileSizeHigh=0x0, nFileSizeLow=0xfc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="yJZvE.ots", cAlternateFileName="")) returned 0
	[0124.432] FindClose (in: hFindFile=0xd9d680 | out: hFindFile=0xd9d680) returned 1
	[0124.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0124.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0124.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0124.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0124.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto", lpFilePart=0x0) returned 0x23
	[0124.432] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84633f90, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0xab27e008, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xab27e008, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d680
	[0124.432] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84633f90, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0xab27e008, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xab27e008, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.433] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1153420, ftCreationTime.dwHighDateTime=0x1d5e818, ftLastAccessTime.dwLowDateTime=0x3d3e24c0, ftLastAccessTime.dwHighDateTime=0x1d5e47f, ftLastWriteTime.dwLowDateTime=0x3d3e24c0, ftLastWriteTime.dwHighDateTime=0x1d5e47f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-44naS.gif", cAlternateFileName="")) returned 1
	[0124.433] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da3c390, ftCreationTime.dwHighDateTime=0x1d5ebb4, ftLastAccessTime.dwLowDateTime=0xa61430, ftLastAccessTime.dwHighDateTime=0x1d5e6de, ftLastWriteTime.dwLowDateTime=0xa61430, ftLastWriteTime.dwHighDateTime=0x1d5e6de, nFileSizeHigh=0x0, nFileSizeLow=0x17b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="-tZ mXkrzchE4sb.ots", cAlternateFileName="-TZMXK~1.OTS")) returned 1
	[0124.434] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1f280, ftCreationTime.dwHighDateTime=0x1d5eea8, ftLastAccessTime.dwLowDateTime=0x738cc4f0, ftLastAccessTime.dwHighDateTime=0x1d5ef38, ftLastWriteTime.dwLowDateTime=0xa9f6b706, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x56f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3UURnL42yKIc.pptx.rogue", cAlternateFileName="3UURNL~1.ROG")) returned 1
	[0124.434] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf008de80, ftCreationTime.dwHighDateTime=0x1d5efe5, ftLastAccessTime.dwLowDateTime=0xcfed5300, ftLastAccessTime.dwHighDateTime=0x1d5f112, ftLastWriteTime.dwLowDateTime=0xcfed5300, ftLastWriteTime.dwHighDateTime=0x1d5f112, nFileSizeHigh=0x0, nFileSizeLow=0x2862, dwReserved0=0x0, dwReserved1=0x0, cFileName="BU wLpP0Lpajv_GO.wav", cAlternateFileName="BUWLPP~1.WAV")) returned 1
	[0124.434] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52e2300, ftCreationTime.dwHighDateTime=0x1d5eb94, ftLastAccessTime.dwLowDateTime=0x2a66e260, ftLastAccessTime.dwHighDateTime=0x1d5eaba, ftLastWriteTime.dwLowDateTime=0xaa076350, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xd9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctlLnDxYs.xls.rogue", cAlternateFileName="CTLLND~1.ROG")) returned 1
	[0124.434] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f661e80, ftCreationTime.dwHighDateTime=0x1d5e4d9, ftLastAccessTime.dwLowDateTime=0xdb82bea0, ftLastAccessTime.dwHighDateTime=0x1d5e490, ftLastWriteTime.dwLowDateTime=0xdb82bea0, ftLastWriteTime.dwHighDateTime=0x1d5e490, nFileSizeHigh=0x0, nFileSizeLow=0xaed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GSsVL.pps", cAlternateFileName="")) returned 1
	[0124.434] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4388e70, ftCreationTime.dwHighDateTime=0x1d5e7bb, ftLastAccessTime.dwLowDateTime=0x556d5bc0, ftLastAccessTime.dwHighDateTime=0x1d5eb7c, ftLastWriteTime.dwLowDateTime=0xaa134f4a, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iMNWoYK4Ibdd.mkv.rogue", cAlternateFileName="IMNWOY~1.ROG")) returned 1
	[0124.434] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2c75290, ftCreationTime.dwHighDateTime=0x1d5e4f9, ftLastAccessTime.dwLowDateTime=0x6463590, ftLastAccessTime.dwHighDateTime=0x1d5e806, ftLastWriteTime.dwLowDateTime=0xaa3711d1, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x166d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KwGAkV EXZ3kxIaWo.jpg.rogue", cAlternateFileName="KWGAKV~1.ROG")) returned 1
	[0124.435] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee1ac90, ftCreationTime.dwHighDateTime=0x1d5f047, ftLastAccessTime.dwLowDateTime=0x1f374ac0, ftLastAccessTime.dwHighDateTime=0x1d5e915, ftLastWriteTime.dwLowDateTime=0xaa79d786, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x122f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MKi9c49U.png.rogue", cAlternateFileName="MKI9C4~1.ROG")) returned 1
	[0124.435] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e766e20, ftCreationTime.dwHighDateTime=0x1d5e21d, ftLastAccessTime.dwLowDateTime=0x69c3d60, ftLastAccessTime.dwHighDateTime=0x1d5e8cd, ftLastWriteTime.dwLowDateTime=0xaa98d245, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="q5g4A2_KwZmg_m.docx.rogue", cAlternateFileName="Q5G4A2~1.ROG")) returned 1
	[0124.435] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ccde00, ftCreationTime.dwHighDateTime=0x1d5ecd6, ftLastAccessTime.dwLowDateTime=0xf875bb70, ftLastAccessTime.dwHighDateTime=0x1d5e48b, ftLastWriteTime.dwLowDateTime=0xaabc9285, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x6810, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMdawQ.xls.rogue", cAlternateFileName="SMDAWQ~1.ROG")) returned 1
	[0124.435] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4425fc0, ftCreationTime.dwHighDateTime=0x1d5e618, ftLastAccessTime.dwLowDateTime=0xa13a5e80, ftLastAccessTime.dwHighDateTime=0x1d5eb91, ftLastWriteTime.dwLowDateTime=0xaae2ba52, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xc8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TA37aX03J 25R5.doc.rogue", cAlternateFileName="TA37AX~1.ROG")) returned 1
	[0124.435] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa393cad0, ftCreationTime.dwHighDateTime=0x1d5e0fc, ftLastAccessTime.dwLowDateTime=0xa35de6d0, ftLastAccessTime.dwHighDateTime=0x1d5ef2b, ftLastWriteTime.dwLowDateTime=0xa35de6d0, ftLastWriteTime.dwHighDateTime=0x1d5ef2b, nFileSizeHigh=0x0, nFileSizeLow=0xfa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="U2A7KBSK.m4a", cAlternateFileName="")) returned 1
	[0124.435] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a972b0, ftCreationTime.dwHighDateTime=0x1d5e7f4, ftLastAccessTime.dwLowDateTime=0xcf5c5380, ftLastAccessTime.dwHighDateTime=0x1d5f097, ftLastWriteTime.dwLowDateTime=0xcf5c5380, ftLastWriteTime.dwHighDateTime=0x1d5f097, nFileSizeHigh=0x0, nFileSizeLow=0x3374, dwReserved0=0x0, dwReserved1=0x0, cFileName="venFA HB1ntS.odp", cAlternateFileName="VENFAH~1.ODP")) returned 1
	[0124.436] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4d62f0, ftCreationTime.dwHighDateTime=0x1d5ec4d, ftLastAccessTime.dwLowDateTime=0x5b3917d0, ftLastAccessTime.dwHighDateTime=0x1d5ece2, ftLastWriteTime.dwLowDateTime=0xab041f25, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x10e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="wUOtYmcDXwbtj.jpg.rogue", cAlternateFileName="WUOTYM~1.ROG")) returned 1
	[0124.436] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc44700, ftCreationTime.dwHighDateTime=0x1d5e2da, ftLastAccessTime.dwLowDateTime=0xd9480cc0, ftLastAccessTime.dwHighDateTime=0x1d5eb26, ftLastWriteTime.dwLowDateTime=0xab257daf, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x38f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XpWX9X7HcnV.png.rogue", cAlternateFileName="XPWX9X~1.ROG")) returned 1
	[0124.436] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0124.436] FindClose (in: hFindFile=0xd9d680 | out: hFindFile=0xd9d680) returned 1
	[0124.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0124.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0124.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0124.437] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0124.437] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto", lpFilePart=0x0) returned 0x23
	[0124.437] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mm3aHAOeWto\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84633f90, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0xab27e008, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xab27e008, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d680
	[0124.437] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84633f90, ftCreationTime.dwHighDateTime=0x1d5ebc1, ftLastAccessTime.dwLowDateTime=0xab27e008, ftLastAccessTime.dwHighDateTime=0x1d60875, ftLastWriteTime.dwLowDateTime=0xab27e008, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.437] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1153420, ftCreationTime.dwHighDateTime=0x1d5e818, ftLastAccessTime.dwLowDateTime=0x3d3e24c0, ftLastAccessTime.dwHighDateTime=0x1d5e47f, ftLastWriteTime.dwLowDateTime=0x3d3e24c0, ftLastWriteTime.dwHighDateTime=0x1d5e47f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-44naS.gif", cAlternateFileName="")) returned 1
	[0124.438] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da3c390, ftCreationTime.dwHighDateTime=0x1d5ebb4, ftLastAccessTime.dwLowDateTime=0xa61430, ftLastAccessTime.dwHighDateTime=0x1d5e6de, ftLastWriteTime.dwLowDateTime=0xa61430, ftLastWriteTime.dwHighDateTime=0x1d5e6de, nFileSizeHigh=0x0, nFileSizeLow=0x17b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="-tZ mXkrzchE4sb.ots", cAlternateFileName="-TZMXK~1.OTS")) returned 1
	[0124.438] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1f280, ftCreationTime.dwHighDateTime=0x1d5eea8, ftLastAccessTime.dwLowDateTime=0x738cc4f0, ftLastAccessTime.dwHighDateTime=0x1d5ef38, ftLastWriteTime.dwLowDateTime=0xa9f6b706, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x56f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3UURnL42yKIc.pptx.rogue", cAlternateFileName="3UURNL~1.ROG")) returned 1
	[0124.438] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf008de80, ftCreationTime.dwHighDateTime=0x1d5efe5, ftLastAccessTime.dwLowDateTime=0xcfed5300, ftLastAccessTime.dwHighDateTime=0x1d5f112, ftLastWriteTime.dwLowDateTime=0xcfed5300, ftLastWriteTime.dwHighDateTime=0x1d5f112, nFileSizeHigh=0x0, nFileSizeLow=0x2862, dwReserved0=0x0, dwReserved1=0x0, cFileName="BU wLpP0Lpajv_GO.wav", cAlternateFileName="BUWLPP~1.WAV")) returned 1
	[0124.438] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52e2300, ftCreationTime.dwHighDateTime=0x1d5eb94, ftLastAccessTime.dwLowDateTime=0x2a66e260, ftLastAccessTime.dwHighDateTime=0x1d5eaba, ftLastWriteTime.dwLowDateTime=0xaa076350, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xd9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctlLnDxYs.xls.rogue", cAlternateFileName="CTLLND~1.ROG")) returned 1
	[0124.438] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f661e80, ftCreationTime.dwHighDateTime=0x1d5e4d9, ftLastAccessTime.dwLowDateTime=0xdb82bea0, ftLastAccessTime.dwHighDateTime=0x1d5e490, ftLastWriteTime.dwLowDateTime=0xdb82bea0, ftLastWriteTime.dwHighDateTime=0x1d5e490, nFileSizeHigh=0x0, nFileSizeLow=0xaed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GSsVL.pps", cAlternateFileName="")) returned 1
	[0124.439] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4388e70, ftCreationTime.dwHighDateTime=0x1d5e7bb, ftLastAccessTime.dwLowDateTime=0x556d5bc0, ftLastAccessTime.dwHighDateTime=0x1d5eb7c, ftLastWriteTime.dwLowDateTime=0xaa134f4a, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iMNWoYK4Ibdd.mkv.rogue", cAlternateFileName="IMNWOY~1.ROG")) returned 1
	[0124.439] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2c75290, ftCreationTime.dwHighDateTime=0x1d5e4f9, ftLastAccessTime.dwLowDateTime=0x6463590, ftLastAccessTime.dwHighDateTime=0x1d5e806, ftLastWriteTime.dwLowDateTime=0xaa3711d1, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x166d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KwGAkV EXZ3kxIaWo.jpg.rogue", cAlternateFileName="KWGAKV~1.ROG")) returned 1
	[0124.439] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee1ac90, ftCreationTime.dwHighDateTime=0x1d5f047, ftLastAccessTime.dwLowDateTime=0x1f374ac0, ftLastAccessTime.dwHighDateTime=0x1d5e915, ftLastWriteTime.dwLowDateTime=0xaa79d786, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x122f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MKi9c49U.png.rogue", cAlternateFileName="MKI9C4~1.ROG")) returned 1
	[0124.439] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e766e20, ftCreationTime.dwHighDateTime=0x1d5e21d, ftLastAccessTime.dwLowDateTime=0x69c3d60, ftLastAccessTime.dwHighDateTime=0x1d5e8cd, ftLastWriteTime.dwLowDateTime=0xaa98d245, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="q5g4A2_KwZmg_m.docx.rogue", cAlternateFileName="Q5G4A2~1.ROG")) returned 1
	[0124.439] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ccde00, ftCreationTime.dwHighDateTime=0x1d5ecd6, ftLastAccessTime.dwLowDateTime=0xf875bb70, ftLastAccessTime.dwHighDateTime=0x1d5e48b, ftLastWriteTime.dwLowDateTime=0xaabc9285, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x6810, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMdawQ.xls.rogue", cAlternateFileName="SMDAWQ~1.ROG")) returned 1
	[0124.440] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4425fc0, ftCreationTime.dwHighDateTime=0x1d5e618, ftLastAccessTime.dwLowDateTime=0xa13a5e80, ftLastAccessTime.dwHighDateTime=0x1d5eb91, ftLastWriteTime.dwLowDateTime=0xaae2ba52, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xc8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TA37aX03J 25R5.doc.rogue", cAlternateFileName="TA37AX~1.ROG")) returned 1
	[0124.440] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa393cad0, ftCreationTime.dwHighDateTime=0x1d5e0fc, ftLastAccessTime.dwLowDateTime=0xa35de6d0, ftLastAccessTime.dwHighDateTime=0x1d5ef2b, ftLastWriteTime.dwLowDateTime=0xa35de6d0, ftLastWriteTime.dwHighDateTime=0x1d5ef2b, nFileSizeHigh=0x0, nFileSizeLow=0xfa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="U2A7KBSK.m4a", cAlternateFileName="")) returned 1
	[0124.440] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a972b0, ftCreationTime.dwHighDateTime=0x1d5e7f4, ftLastAccessTime.dwLowDateTime=0xcf5c5380, ftLastAccessTime.dwHighDateTime=0x1d5f097, ftLastWriteTime.dwLowDateTime=0xcf5c5380, ftLastWriteTime.dwHighDateTime=0x1d5f097, nFileSizeHigh=0x0, nFileSizeLow=0x3374, dwReserved0=0x0, dwReserved1=0x0, cFileName="venFA HB1ntS.odp", cAlternateFileName="VENFAH~1.ODP")) returned 1
	[0124.440] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4d62f0, ftCreationTime.dwHighDateTime=0x1d5ec4d, ftLastAccessTime.dwLowDateTime=0x5b3917d0, ftLastAccessTime.dwHighDateTime=0x1d5ece2, ftLastWriteTime.dwLowDateTime=0xab041f25, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x10e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="wUOtYmcDXwbtj.jpg.rogue", cAlternateFileName="WUOTYM~1.ROG")) returned 1
	[0124.440] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc44700, ftCreationTime.dwHighDateTime=0x1d5e2da, ftLastAccessTime.dwLowDateTime=0xd9480cc0, ftLastAccessTime.dwHighDateTime=0x1d5eb26, ftLastWriteTime.dwLowDateTime=0xab257daf, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x38f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XpWX9X7HcnV.png.rogue", cAlternateFileName="XPWX9X~1.ROG")) returned 1
	[0124.441] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc44700, ftCreationTime.dwHighDateTime=0x1d5e2da, ftLastAccessTime.dwLowDateTime=0xd9480cc0, ftLastAccessTime.dwHighDateTime=0x1d5eb26, ftLastWriteTime.dwLowDateTime=0xab257daf, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x38f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XpWX9X7HcnV.png.rogue", cAlternateFileName="XPWX9X~1.ROG")) returned 0
	[0124.441] FindClose (in: hFindFile=0xd9d680 | out: hFindFile=0xd9d680) returned 1
	[0124.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0124.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0124.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0124.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a
	[0124.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x1a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19
	[0124.442] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec373288, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec373288, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d700
	[0124.442] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec373288, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec373288, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.442] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23267b0, ftCreationTime.dwHighDateTime=0x1d5e187, ftLastAccessTime.dwLowDateTime=0x1dd12ec0, ftLastAccessTime.dwHighDateTime=0x1d5e7db, ftLastWriteTime.dwLowDateTime=0x1dd12ec0, ftLastWriteTime.dwHighDateTime=0x1d5e7db, nFileSizeHigh=0x0, nFileSizeLow=0x74ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="0PmBFAX_4qlyUG.csv", cAlternateFileName="0PMBFA~1.CSV")) returned 1
	[0124.443] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c7841b0, ftCreationTime.dwHighDateTime=0x1d573ac, ftLastAccessTime.dwLowDateTime=0x5efd8710, ftLastAccessTime.dwHighDateTime=0x1d5c6c8, ftLastWriteTime.dwLowDateTime=0x5efd8710, ftLastWriteTime.dwHighDateTime=0x1d5c6c8, nFileSizeHigh=0x0, nFileSizeLow=0x1413b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1cp4DiKej1.pptx", cAlternateFileName="1CP4DI~1.PPT")) returned 1
	[0124.443] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ff50860, ftCreationTime.dwHighDateTime=0x1d5f05b, ftLastAccessTime.dwLowDateTime=0x951b6f00, ftLastAccessTime.dwHighDateTime=0x1d5ee38, ftLastWriteTime.dwLowDateTime=0x951b6f00, ftLastWriteTime.dwHighDateTime=0x1d5ee38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1p61Pe3tAWVYhMz", cAlternateFileName="1P61PE~1")) returned 1
	[0124.443] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3255900, ftCreationTime.dwHighDateTime=0x1d5ef50, ftLastAccessTime.dwLowDateTime=0xc4480eb0, ftLastAccessTime.dwHighDateTime=0x1d5f0f8, ftLastWriteTime.dwLowDateTime=0xc4480eb0, ftLastWriteTime.dwHighDateTime=0x1d5f0f8, nFileSizeHigh=0x0, nFileSizeLow=0x271f, dwReserved0=0x0, dwReserved1=0x0, cFileName="51qCz EXtzEdBiQ.xls", cAlternateFileName="51QCZE~1.XLS")) returned 1
	[0124.443] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dde8da0, ftCreationTime.dwHighDateTime=0x1d5e520, ftLastAccessTime.dwLowDateTime=0x2e52e3c0, ftLastAccessTime.dwHighDateTime=0x1d5d10a, ftLastWriteTime.dwLowDateTime=0x2e52e3c0, ftLastWriteTime.dwHighDateTime=0x1d5d10a, nFileSizeHigh=0x0, nFileSizeLow=0x1b44, dwReserved0=0x0, dwReserved1=0x0, cFileName="7dT2_CeUcX6xqTH.xlsx", cAlternateFileName="7DT2_C~1.XLS")) returned 1
	[0124.443] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45d9d750, ftCreationTime.dwHighDateTime=0x1d5ec54, ftLastAccessTime.dwLowDateTime=0xa4a4eee0, ftLastAccessTime.dwHighDateTime=0x1d5e5ed, ftLastWriteTime.dwLowDateTime=0xa4a4eee0, ftLastWriteTime.dwHighDateTime=0x1d5e5ed, nFileSizeHigh=0x0, nFileSizeLow=0x1868b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8JPbxVIKKHCWB5.odp", cAlternateFileName="8JPBXV~1.ODP")) returned 1
	[0124.444] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb2d2720, ftCreationTime.dwHighDateTime=0x1d5ec3c, ftLastAccessTime.dwLowDateTime=0x871f8000, ftLastAccessTime.dwHighDateTime=0x1d5e3d7, ftLastWriteTime.dwLowDateTime=0x871f8000, ftLastWriteTime.dwHighDateTime=0x1d5e3d7, nFileSizeHigh=0x0, nFileSizeLow=0x69cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="8nZe.xlsx", cAlternateFileName="8NZE~1.XLS")) returned 1
	[0124.444] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991a06a0, ftCreationTime.dwHighDateTime=0x1d5ea84, ftLastAccessTime.dwLowDateTime=0x7684a440, ftLastAccessTime.dwHighDateTime=0x1d5e26b, ftLastWriteTime.dwLowDateTime=0x7684a440, ftLastWriteTime.dwHighDateTime=0x1d5e26b, nFileSizeHigh=0x0, nFileSizeLow=0x11222, dwReserved0=0x0, dwReserved1=0x0, cFileName="8TLUai88.odp", cAlternateFileName="")) returned 1
	[0124.444] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c927b0, ftCreationTime.dwHighDateTime=0x1d5eb32, ftLastAccessTime.dwLowDateTime=0xbb9485c0, ftLastAccessTime.dwHighDateTime=0x1d5e27d, ftLastWriteTime.dwLowDateTime=0xbb9485c0, ftLastWriteTime.dwHighDateTime=0x1d5e27d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="97TAjlOUx", cAlternateFileName="97TAJL~1")) returned 1
	[0124.444] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43082c80, ftCreationTime.dwHighDateTime=0x1d5b819, ftLastAccessTime.dwLowDateTime=0x8ac2be10, ftLastAccessTime.dwHighDateTime=0x1d5a413, ftLastWriteTime.dwLowDateTime=0x8ac2be10, ftLastWriteTime.dwHighDateTime=0x1d5a413, nFileSizeHigh=0x0, nFileSizeLow=0x1c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="a2zQVJhz_nGcvX.pptx", cAlternateFileName="A2ZQVJ~1.PPT")) returned 1
	[0124.444] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ca4130, ftCreationTime.dwHighDateTime=0x1d5a8a2, ftLastAccessTime.dwLowDateTime=0xfa5913f0, ftLastAccessTime.dwHighDateTime=0x1d56c46, ftLastWriteTime.dwLowDateTime=0xfa5913f0, ftLastWriteTime.dwHighDateTime=0x1d56c46, nFileSizeHigh=0x0, nFileSizeLow=0xbb5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ah7hm.docx", cAlternateFileName="AH7HM~1.DOC")) returned 1
	[0124.444] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd12f6410, ftCreationTime.dwHighDateTime=0x1d5e64a, ftLastAccessTime.dwLowDateTime=0x3c68be90, ftLastAccessTime.dwHighDateTime=0x1d572cc, ftLastWriteTime.dwLowDateTime=0x3c68be90, ftLastWriteTime.dwHighDateTime=0x1d572cc, nFileSizeHigh=0x0, nFileSizeLow=0x18048, dwReserved0=0x0, dwReserved1=0x0, cFileName="BA1hPLWP6z8VDT14vQX.docx", cAlternateFileName="BA1HPL~1.DOC")) returned 1
	[0124.445] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1
	[0124.445] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0124.445] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x195a16d0, ftCreationTime.dwHighDateTime=0x1d5c342, ftLastAccessTime.dwLowDateTime=0x498ae910, ftLastAccessTime.dwHighDateTime=0x1d5db98, ftLastWriteTime.dwLowDateTime=0x498ae910, ftLastWriteTime.dwHighDateTime=0x1d5db98, nFileSizeHigh=0x0, nFileSizeLow=0x6d45, dwReserved0=0x0, dwReserved1=0x0, cFileName="dM_mYVRYTNbQhMc616 f.docx", cAlternateFileName="DM_MYV~1.DOC")) returned 1
	[0124.445] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb7dedd0, ftCreationTime.dwHighDateTime=0x1d569c1, ftLastAccessTime.dwLowDateTime=0xa071af30, ftLastAccessTime.dwHighDateTime=0x1d5e3ad, ftLastWriteTime.dwLowDateTime=0xa071af30, ftLastWriteTime.dwHighDateTime=0x1d5e3ad, nFileSizeHigh=0x0, nFileSizeLow=0x7baf, dwReserved0=0x0, dwReserved1=0x0, cFileName="hdx-g-JJh6_xTB7.xlsx", cAlternateFileName="HDX-G-~1.XLS")) returned 1
	[0124.445] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99c97810, ftCreationTime.dwHighDateTime=0x1d5eb56, ftLastAccessTime.dwLowDateTime=0x73bb7480, ftLastAccessTime.dwHighDateTime=0x1d5e29f, ftLastWriteTime.dwLowDateTime=0x73bb7480, ftLastWriteTime.dwHighDateTime=0x1d5e29f, nFileSizeHigh=0x0, nFileSizeLow=0x5a8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HZKPhb.odt", cAlternateFileName="")) returned 1
	[0124.445] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd71c130, ftCreationTime.dwHighDateTime=0x1d5a254, ftLastAccessTime.dwLowDateTime=0xbd0c4370, ftLastAccessTime.dwHighDateTime=0x1d5ce0a, ftLastWriteTime.dwLowDateTime=0xbd0c4370, ftLastWriteTime.dwHighDateTime=0x1d5ce0a, nFileSizeHigh=0x0, nFileSizeLow=0xa887, dwReserved0=0x0, dwReserved1=0x0, cFileName="jORU.xlsx", cAlternateFileName="JORU~1.XLS")) returned 1
	[0124.445] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51807530, ftCreationTime.dwHighDateTime=0x1d5c32f, ftLastAccessTime.dwLowDateTime=0xa494e930, ftLastAccessTime.dwHighDateTime=0x1d5e504, ftLastWriteTime.dwLowDateTime=0xa494e930, ftLastWriteTime.dwHighDateTime=0x1d5e504, nFileSizeHigh=0x0, nFileSizeLow=0x10a36, dwReserved0=0x0, dwReserved1=0x0, cFileName="JW j1YBH26EbYrI.xlsx", cAlternateFileName="JWJ1YB~1.XLS")) returned 1
	[0124.446] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4760e0, ftCreationTime.dwHighDateTime=0x1d5ec9f, ftLastAccessTime.dwLowDateTime=0x98c64a10, ftLastAccessTime.dwHighDateTime=0x1d5ed31, ftLastWriteTime.dwLowDateTime=0x98c64a10, ftLastWriteTime.dwHighDateTime=0x1d5ed31, nFileSizeHigh=0x0, nFileSizeLow=0x91a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml5281I.doc", cAlternateFileName="")) returned 1
	[0124.446] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0124.446] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0124.446] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1
	[0124.446] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0124.446] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7847930, ftCreationTime.dwHighDateTime=0x1d58118, ftLastAccessTime.dwLowDateTime=0x56a53a90, ftLastAccessTime.dwHighDateTime=0x1d564a8, ftLastWriteTime.dwLowDateTime=0x56a53a90, ftLastWriteTime.dwHighDateTime=0x1d564a8, nFileSizeHigh=0x0, nFileSizeLow=0x968e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nK8vcUdOk.pptx", cAlternateFileName="NK8VCU~1.PPT")) returned 1
	[0124.446] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc55909e0, ftCreationTime.dwHighDateTime=0x1d5ec60, ftLastAccessTime.dwLowDateTime=0x57eafc60, ftLastAccessTime.dwHighDateTime=0x1d5eb70, ftLastWriteTime.dwLowDateTime=0x57eafc60, ftLastWriteTime.dwHighDateTime=0x1d5eb70, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ogufMQXY1W_WKDrW8FLe", cAlternateFileName="OGUFMQ~1")) returned 1
	[0124.447] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x5ee892ad, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1
	[0124.447] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ca1c690, ftCreationTime.dwHighDateTime=0x1d5e2e5, ftLastAccessTime.dwLowDateTime=0xf9ef730, ftLastAccessTime.dwHighDateTime=0x1d5a166, ftLastWriteTime.dwLowDateTime=0xf9ef730, ftLastWriteTime.dwHighDateTime=0x1d5a166, nFileSizeHigh=0x0, nFileSizeLow=0x18fbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="qWXfMJl.docx", cAlternateFileName="QWXFMJ~1.DOC")) returned 1
	[0124.447] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65235760, ftCreationTime.dwHighDateTime=0x1d5c096, ftLastAccessTime.dwLowDateTime=0x537737c0, ftLastAccessTime.dwHighDateTime=0x1d5a354, ftLastWriteTime.dwLowDateTime=0x537737c0, ftLastWriteTime.dwHighDateTime=0x1d5a354, nFileSizeHigh=0x0, nFileSizeLow=0x16f13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qzakc3EYYm7PWFft.docx", cAlternateFileName="QZAKC3~1.DOC")) returned 1
	[0124.447] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ed87de0, ftCreationTime.dwHighDateTime=0x1d5e8cb, ftLastAccessTime.dwLowDateTime=0x279aa6d0, ftLastAccessTime.dwHighDateTime=0x1d5e587, ftLastWriteTime.dwLowDateTime=0x279aa6d0, ftLastWriteTime.dwHighDateTime=0x1d5e587, nFileSizeHigh=0x0, nFileSizeLow=0x14979, dwReserved0=0x0, dwReserved1=0x0, cFileName="rESEdV3_h.ods", cAlternateFileName="RESEDV~1.ODS")) returned 1
	[0124.447] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe001bd80, ftCreationTime.dwHighDateTime=0x1d5e3d4, ftLastAccessTime.dwLowDateTime=0x2a17c710, ftLastAccessTime.dwHighDateTime=0x1d58deb, ftLastWriteTime.dwLowDateTime=0x2a17c710, ftLastWriteTime.dwHighDateTime=0x1d58deb, nFileSizeHigh=0x0, nFileSizeLow=0x26d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tTCs.pptx", cAlternateFileName="TTCS~1.PPT")) returned 1
	[0124.447] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9bf8ed0, ftCreationTime.dwHighDateTime=0x1d5ae39, ftLastAccessTime.dwLowDateTime=0xf7168800, ftLastAccessTime.dwHighDateTime=0x1d5c89c, ftLastWriteTime.dwLowDateTime=0xf7168800, ftLastWriteTime.dwHighDateTime=0x1d5c89c, nFileSizeHigh=0x0, nFileSizeLow=0x975c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vjxv.xlsx", cAlternateFileName="VJXV~1.XLS")) returned 1
	[0124.447] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f47c5a0, ftCreationTime.dwHighDateTime=0x1d5ea9a, ftLastAccessTime.dwLowDateTime=0x60789870, ftLastAccessTime.dwHighDateTime=0x1d5dacb, ftLastWriteTime.dwLowDateTime=0x60789870, ftLastWriteTime.dwHighDateTime=0x1d5dacb, nFileSizeHigh=0x0, nFileSizeLow=0xe0a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="voKwPHL.pptx", cAlternateFileName="VOKWPH~1.PPT")) returned 1
	[0124.447] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b704f90, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0x7fb0ff80, ftLastAccessTime.dwHighDateTime=0x1d5ec2c, ftLastWriteTime.dwLowDateTime=0x7fb0ff80, ftLastWriteTime.dwHighDateTime=0x1d5ec2c, nFileSizeHigh=0x0, nFileSizeLow=0x942e, dwReserved0=0x0, dwReserved1=0x0, cFileName="y50F_oqxgSWVvOtTw.docx", cAlternateFileName="Y50F_O~1.DOC")) returned 1
	[0124.447] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7679a10, ftCreationTime.dwHighDateTime=0x1d5e20a, ftLastAccessTime.dwLowDateTime=0xf1f77e10, ftLastAccessTime.dwHighDateTime=0x1d5ec82, ftLastWriteTime.dwLowDateTime=0xf1f77e10, ftLastWriteTime.dwHighDateTime=0x1d5ec82, nFileSizeHigh=0x0, nFileSizeLow=0xd09, dwReserved0=0x0, dwReserved1=0x0, cFileName="_arB4x9DjD.xlsx", cAlternateFileName="_ARB4X~1.XLS")) returned 1
	[0124.447] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0124.447] FindClose (in: hFindFile=0xd9d700 | out: hFindFile=0xd9d700) returned 1
	[0124.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0124.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0124.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0124.448] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a
	[0124.448] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x1a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19
	[0124.448] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec373288, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec373288, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d680
	[0124.448] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec373288, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec373288, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.448] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23267b0, ftCreationTime.dwHighDateTime=0x1d5e187, ftLastAccessTime.dwLowDateTime=0x1dd12ec0, ftLastAccessTime.dwHighDateTime=0x1d5e7db, ftLastWriteTime.dwLowDateTime=0x1dd12ec0, ftLastWriteTime.dwHighDateTime=0x1d5e7db, nFileSizeHigh=0x0, nFileSizeLow=0x74ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="0PmBFAX_4qlyUG.csv", cAlternateFileName="0PMBFA~1.CSV")) returned 1
	[0124.451] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c7841b0, ftCreationTime.dwHighDateTime=0x1d573ac, ftLastAccessTime.dwLowDateTime=0x5efd8710, ftLastAccessTime.dwHighDateTime=0x1d5c6c8, ftLastWriteTime.dwLowDateTime=0x5efd8710, ftLastWriteTime.dwHighDateTime=0x1d5c6c8, nFileSizeHigh=0x0, nFileSizeLow=0x1413b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1cp4DiKej1.pptx", cAlternateFileName="1CP4DI~1.PPT")) returned 1
	[0124.451] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ff50860, ftCreationTime.dwHighDateTime=0x1d5f05b, ftLastAccessTime.dwLowDateTime=0x951b6f00, ftLastAccessTime.dwHighDateTime=0x1d5ee38, ftLastWriteTime.dwLowDateTime=0x951b6f00, ftLastWriteTime.dwHighDateTime=0x1d5ee38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1p61Pe3tAWVYhMz", cAlternateFileName="1P61PE~1")) returned 1
	[0124.451] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3255900, ftCreationTime.dwHighDateTime=0x1d5ef50, ftLastAccessTime.dwLowDateTime=0xc4480eb0, ftLastAccessTime.dwHighDateTime=0x1d5f0f8, ftLastWriteTime.dwLowDateTime=0xc4480eb0, ftLastWriteTime.dwHighDateTime=0x1d5f0f8, nFileSizeHigh=0x0, nFileSizeLow=0x271f, dwReserved0=0x0, dwReserved1=0x0, cFileName="51qCz EXtzEdBiQ.xls", cAlternateFileName="51QCZE~1.XLS")) returned 1
	[0124.451] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dde8da0, ftCreationTime.dwHighDateTime=0x1d5e520, ftLastAccessTime.dwLowDateTime=0x2e52e3c0, ftLastAccessTime.dwHighDateTime=0x1d5d10a, ftLastWriteTime.dwLowDateTime=0x2e52e3c0, ftLastWriteTime.dwHighDateTime=0x1d5d10a, nFileSizeHigh=0x0, nFileSizeLow=0x1b44, dwReserved0=0x0, dwReserved1=0x0, cFileName="7dT2_CeUcX6xqTH.xlsx", cAlternateFileName="7DT2_C~1.XLS")) returned 1
	[0124.452] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45d9d750, ftCreationTime.dwHighDateTime=0x1d5ec54, ftLastAccessTime.dwLowDateTime=0xa4a4eee0, ftLastAccessTime.dwHighDateTime=0x1d5e5ed, ftLastWriteTime.dwLowDateTime=0xa4a4eee0, ftLastWriteTime.dwHighDateTime=0x1d5e5ed, nFileSizeHigh=0x0, nFileSizeLow=0x1868b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8JPbxVIKKHCWB5.odp", cAlternateFileName="8JPBXV~1.ODP")) returned 1
	[0124.452] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb2d2720, ftCreationTime.dwHighDateTime=0x1d5ec3c, ftLastAccessTime.dwLowDateTime=0x871f8000, ftLastAccessTime.dwHighDateTime=0x1d5e3d7, ftLastWriteTime.dwLowDateTime=0x871f8000, ftLastWriteTime.dwHighDateTime=0x1d5e3d7, nFileSizeHigh=0x0, nFileSizeLow=0x69cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="8nZe.xlsx", cAlternateFileName="8NZE~1.XLS")) returned 1
	[0124.452] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991a06a0, ftCreationTime.dwHighDateTime=0x1d5ea84, ftLastAccessTime.dwLowDateTime=0x7684a440, ftLastAccessTime.dwHighDateTime=0x1d5e26b, ftLastWriteTime.dwLowDateTime=0x7684a440, ftLastWriteTime.dwHighDateTime=0x1d5e26b, nFileSizeHigh=0x0, nFileSizeLow=0x11222, dwReserved0=0x0, dwReserved1=0x0, cFileName="8TLUai88.odp", cAlternateFileName="")) returned 1
	[0124.452] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c927b0, ftCreationTime.dwHighDateTime=0x1d5eb32, ftLastAccessTime.dwLowDateTime=0xbb9485c0, ftLastAccessTime.dwHighDateTime=0x1d5e27d, ftLastWriteTime.dwLowDateTime=0xbb9485c0, ftLastWriteTime.dwHighDateTime=0x1d5e27d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="97TAjlOUx", cAlternateFileName="97TAJL~1")) returned 1
	[0124.452] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43082c80, ftCreationTime.dwHighDateTime=0x1d5b819, ftLastAccessTime.dwLowDateTime=0x8ac2be10, ftLastAccessTime.dwHighDateTime=0x1d5a413, ftLastWriteTime.dwLowDateTime=0x8ac2be10, ftLastWriteTime.dwHighDateTime=0x1d5a413, nFileSizeHigh=0x0, nFileSizeLow=0x1c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="a2zQVJhz_nGcvX.pptx", cAlternateFileName="A2ZQVJ~1.PPT")) returned 1
	[0124.452] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ca4130, ftCreationTime.dwHighDateTime=0x1d5a8a2, ftLastAccessTime.dwLowDateTime=0xfa5913f0, ftLastAccessTime.dwHighDateTime=0x1d56c46, ftLastWriteTime.dwLowDateTime=0xfa5913f0, ftLastWriteTime.dwHighDateTime=0x1d56c46, nFileSizeHigh=0x0, nFileSizeLow=0xbb5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ah7hm.docx", cAlternateFileName="AH7HM~1.DOC")) returned 1
	[0124.452] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd12f6410, ftCreationTime.dwHighDateTime=0x1d5e64a, ftLastAccessTime.dwLowDateTime=0x3c68be90, ftLastAccessTime.dwHighDateTime=0x1d572cc, ftLastWriteTime.dwLowDateTime=0x3c68be90, ftLastWriteTime.dwHighDateTime=0x1d572cc, nFileSizeHigh=0x0, nFileSizeLow=0x18048, dwReserved0=0x0, dwReserved1=0x0, cFileName="BA1hPLWP6z8VDT14vQX.docx", cAlternateFileName="BA1HPL~1.DOC")) returned 1
	[0124.452] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1
	[0124.453] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0124.453] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x195a16d0, ftCreationTime.dwHighDateTime=0x1d5c342, ftLastAccessTime.dwLowDateTime=0x498ae910, ftLastAccessTime.dwHighDateTime=0x1d5db98, ftLastWriteTime.dwLowDateTime=0x498ae910, ftLastWriteTime.dwHighDateTime=0x1d5db98, nFileSizeHigh=0x0, nFileSizeLow=0x6d45, dwReserved0=0x0, dwReserved1=0x0, cFileName="dM_mYVRYTNbQhMc616 f.docx", cAlternateFileName="DM_MYV~1.DOC")) returned 1
	[0124.453] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb7dedd0, ftCreationTime.dwHighDateTime=0x1d569c1, ftLastAccessTime.dwLowDateTime=0xa071af30, ftLastAccessTime.dwHighDateTime=0x1d5e3ad, ftLastWriteTime.dwLowDateTime=0xa071af30, ftLastWriteTime.dwHighDateTime=0x1d5e3ad, nFileSizeHigh=0x0, nFileSizeLow=0x7baf, dwReserved0=0x0, dwReserved1=0x0, cFileName="hdx-g-JJh6_xTB7.xlsx", cAlternateFileName="HDX-G-~1.XLS")) returned 1
	[0124.453] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99c97810, ftCreationTime.dwHighDateTime=0x1d5eb56, ftLastAccessTime.dwLowDateTime=0x73bb7480, ftLastAccessTime.dwHighDateTime=0x1d5e29f, ftLastWriteTime.dwLowDateTime=0x73bb7480, ftLastWriteTime.dwHighDateTime=0x1d5e29f, nFileSizeHigh=0x0, nFileSizeLow=0x5a8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HZKPhb.odt", cAlternateFileName="")) returned 1
	[0124.453] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd71c130, ftCreationTime.dwHighDateTime=0x1d5a254, ftLastAccessTime.dwLowDateTime=0xbd0c4370, ftLastAccessTime.dwHighDateTime=0x1d5ce0a, ftLastWriteTime.dwLowDateTime=0xbd0c4370, ftLastWriteTime.dwHighDateTime=0x1d5ce0a, nFileSizeHigh=0x0, nFileSizeLow=0xa887, dwReserved0=0x0, dwReserved1=0x0, cFileName="jORU.xlsx", cAlternateFileName="JORU~1.XLS")) returned 1
	[0124.453] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51807530, ftCreationTime.dwHighDateTime=0x1d5c32f, ftLastAccessTime.dwLowDateTime=0xa494e930, ftLastAccessTime.dwHighDateTime=0x1d5e504, ftLastWriteTime.dwLowDateTime=0xa494e930, ftLastWriteTime.dwHighDateTime=0x1d5e504, nFileSizeHigh=0x0, nFileSizeLow=0x10a36, dwReserved0=0x0, dwReserved1=0x0, cFileName="JW j1YBH26EbYrI.xlsx", cAlternateFileName="JWJ1YB~1.XLS")) returned 1
	[0124.453] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4760e0, ftCreationTime.dwHighDateTime=0x1d5ec9f, ftLastAccessTime.dwLowDateTime=0x98c64a10, ftLastAccessTime.dwHighDateTime=0x1d5ed31, ftLastWriteTime.dwLowDateTime=0x98c64a10, ftLastWriteTime.dwHighDateTime=0x1d5ed31, nFileSizeHigh=0x0, nFileSizeLow=0x91a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml5281I.doc", cAlternateFileName="")) returned 1
	[0124.453] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0124.453] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0124.453] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1
	[0124.453] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0124.454] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7847930, ftCreationTime.dwHighDateTime=0x1d58118, ftLastAccessTime.dwLowDateTime=0x56a53a90, ftLastAccessTime.dwHighDateTime=0x1d564a8, ftLastWriteTime.dwLowDateTime=0x56a53a90, ftLastWriteTime.dwHighDateTime=0x1d564a8, nFileSizeHigh=0x0, nFileSizeLow=0x968e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nK8vcUdOk.pptx", cAlternateFileName="NK8VCU~1.PPT")) returned 1
	[0124.454] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc55909e0, ftCreationTime.dwHighDateTime=0x1d5ec60, ftLastAccessTime.dwLowDateTime=0x57eafc60, ftLastAccessTime.dwHighDateTime=0x1d5eb70, ftLastWriteTime.dwLowDateTime=0x57eafc60, ftLastWriteTime.dwHighDateTime=0x1d5eb70, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ogufMQXY1W_WKDrW8FLe", cAlternateFileName="OGUFMQ~1")) returned 1
	[0124.454] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x5ee892ad, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1
	[0124.454] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ca1c690, ftCreationTime.dwHighDateTime=0x1d5e2e5, ftLastAccessTime.dwLowDateTime=0xf9ef730, ftLastAccessTime.dwHighDateTime=0x1d5a166, ftLastWriteTime.dwLowDateTime=0xf9ef730, ftLastWriteTime.dwHighDateTime=0x1d5a166, nFileSizeHigh=0x0, nFileSizeLow=0x18fbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="qWXfMJl.docx", cAlternateFileName="QWXFMJ~1.DOC")) returned 1
	[0124.454] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65235760, ftCreationTime.dwHighDateTime=0x1d5c096, ftLastAccessTime.dwLowDateTime=0x537737c0, ftLastAccessTime.dwHighDateTime=0x1d5a354, ftLastWriteTime.dwLowDateTime=0x537737c0, ftLastWriteTime.dwHighDateTime=0x1d5a354, nFileSizeHigh=0x0, nFileSizeLow=0x16f13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qzakc3EYYm7PWFft.docx", cAlternateFileName="QZAKC3~1.DOC")) returned 1
	[0124.454] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ed87de0, ftCreationTime.dwHighDateTime=0x1d5e8cb, ftLastAccessTime.dwLowDateTime=0x279aa6d0, ftLastAccessTime.dwHighDateTime=0x1d5e587, ftLastWriteTime.dwLowDateTime=0x279aa6d0, ftLastWriteTime.dwHighDateTime=0x1d5e587, nFileSizeHigh=0x0, nFileSizeLow=0x14979, dwReserved0=0x0, dwReserved1=0x0, cFileName="rESEdV3_h.ods", cAlternateFileName="RESEDV~1.ODS")) returned 1
	[0124.454] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe001bd80, ftCreationTime.dwHighDateTime=0x1d5e3d4, ftLastAccessTime.dwLowDateTime=0x2a17c710, ftLastAccessTime.dwHighDateTime=0x1d58deb, ftLastWriteTime.dwLowDateTime=0x2a17c710, ftLastWriteTime.dwHighDateTime=0x1d58deb, nFileSizeHigh=0x0, nFileSizeLow=0x26d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tTCs.pptx", cAlternateFileName="TTCS~1.PPT")) returned 1
	[0124.454] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9bf8ed0, ftCreationTime.dwHighDateTime=0x1d5ae39, ftLastAccessTime.dwLowDateTime=0xf7168800, ftLastAccessTime.dwHighDateTime=0x1d5c89c, ftLastWriteTime.dwLowDateTime=0xf7168800, ftLastWriteTime.dwHighDateTime=0x1d5c89c, nFileSizeHigh=0x0, nFileSizeLow=0x975c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vjxv.xlsx", cAlternateFileName="VJXV~1.XLS")) returned 1
	[0124.454] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f47c5a0, ftCreationTime.dwHighDateTime=0x1d5ea9a, ftLastAccessTime.dwLowDateTime=0x60789870, ftLastAccessTime.dwHighDateTime=0x1d5dacb, ftLastWriteTime.dwLowDateTime=0x60789870, ftLastWriteTime.dwHighDateTime=0x1d5dacb, nFileSizeHigh=0x0, nFileSizeLow=0xe0a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="voKwPHL.pptx", cAlternateFileName="VOKWPH~1.PPT")) returned 1
	[0124.455] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b704f90, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0x7fb0ff80, ftLastAccessTime.dwHighDateTime=0x1d5ec2c, ftLastWriteTime.dwLowDateTime=0x7fb0ff80, ftLastWriteTime.dwHighDateTime=0x1d5ec2c, nFileSizeHigh=0x0, nFileSizeLow=0x942e, dwReserved0=0x0, dwReserved1=0x0, cFileName="y50F_oqxgSWVvOtTw.docx", cAlternateFileName="Y50F_O~1.DOC")) returned 1
	[0124.455] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7679a10, ftCreationTime.dwHighDateTime=0x1d5e20a, ftLastAccessTime.dwLowDateTime=0xf1f77e10, ftLastAccessTime.dwHighDateTime=0x1d5ec82, ftLastWriteTime.dwLowDateTime=0xf1f77e10, ftLastWriteTime.dwHighDateTime=0x1d5ec82, nFileSizeHigh=0x0, nFileSizeLow=0xd09, dwReserved0=0x0, dwReserved1=0x0, cFileName="_arB4x9DjD.xlsx", cAlternateFileName="_ARB4X~1.XLS")) returned 1
	[0124.455] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7679a10, ftCreationTime.dwHighDateTime=0x1d5e20a, ftLastAccessTime.dwLowDateTime=0xf1f77e10, ftLastAccessTime.dwHighDateTime=0x1d5ec82, ftLastWriteTime.dwLowDateTime=0xf1f77e10, ftLastWriteTime.dwHighDateTime=0x1d5ec82, nFileSizeHigh=0x0, nFileSizeLow=0xd09, dwReserved0=0x0, dwReserved1=0x0, cFileName="_arB4x9DjD.xlsx", cAlternateFileName="_ARB4X~1.XLS")) returned 0
	[0124.455] FindClose (in: hFindFile=0xd9d680 | out: hFindFile=0xd9d680) returned 1
	[0124.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0124.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0124.455] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0124.455] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv", lpFilePart=0x0) returned 0x2c
	[0124.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0124.455] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv" (normalized: "c:\\users\\fd1hvy\\documents\\0pmbfax_4qlyug.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0124.456] GetFileType (hFile=0x2ec) returned 0x1
	[0124.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0124.456] GetFileType (hFile=0x2ec) returned 0x1
	[0124.456] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x74ab
	[0124.456] ReadFile (in: hFile=0x2ec, lpBuffer=0x2ab8f50, nNumberOfBytesToRead=0x74ab, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2ab8f50*, lpNumberOfBytesRead=0xafe99c*=0x74ab, lpOverlapped=0x0) returned 1
	[0124.457] CloseHandle (hObject=0x2ec) returned 1
	[0124.521] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0124.521] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0124.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0124.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0124.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0124.521] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0124.521] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv", lpFilePart=0x0) returned 0x2c
	[0124.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0124.521] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv" (normalized: "c:\\users\\fd1hvy\\documents\\0pmbfax_4qlyug.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0124.555] GetFileType (hFile=0x2ec) returned 0x1
	[0124.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0124.555] GetFileType (hFile=0x2ec) returned 0x1
	[0124.555] WriteFile (in: hFile=0x2ec, lpBuffer=0x2b2a4ac*, nNumberOfBytesToWrite=0x74b0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2b2a4ac*, lpNumberOfBytesWritten=0xafe990*=0x74b0, lpOverlapped=0x0) returned 1
	[0124.557] CloseHandle (hObject=0x2ec) returned 1
	[0124.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0124.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv", lpFilePart=0x0) returned 0x2c
	[0124.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33
	[0124.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv.rogue", nBufferLength=0x33, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv.rogue", lpFilePart=0x0) returned 0x32
	[0124.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0124.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv" (normalized: "c:\\users\\fd1hvy\\documents\\0pmbfax_4qlyug.csv"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23267b0, ftCreationTime.dwHighDateTime=0x1d5e187, ftLastAccessTime.dwLowDateTime=0x1dd12ec0, ftLastAccessTime.dwHighDateTime=0x1d5e7db, ftLastWriteTime.dwLowDateTime=0xab828f92, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x74b0)) returned 1
	[0124.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0124.559] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv" (normalized: "c:\\users\\fd1hvy\\documents\\0pmbfax_4qlyug.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\0PmBFAX_4qlyUG.csv.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\0pmbfax_4qlyug.csv.rogue")) returned 1
	[0124.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0124.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx", lpFilePart=0x0) returned 0x29
	[0124.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0124.560] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\1cp4dikej1.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0124.560] GetFileType (hFile=0x2ec) returned 0x1
	[0124.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0124.561] GetFileType (hFile=0x2ec) returned 0x1
	[0124.561] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x1413b
	[0124.561] ReadFile (in: hFile=0x2ec, lpBuffer=0x2b31bcc, nNumberOfBytesToRead=0x1413b, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2b31bcc*, lpNumberOfBytesRead=0xafe99c*=0x1413b, lpOverlapped=0x0) returned 1
	[0124.562] CloseHandle (hObject=0x2ec) returned 1
	[0124.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0124.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0124.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0124.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0124.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0124.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0124.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx", lpFilePart=0x0) returned 0x29
	[0124.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0124.630] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\1cp4dikej1.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0124.632] GetFileType (hFile=0x2ec) returned 0x1
	[0124.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0124.632] GetFileType (hFile=0x2ec) returned 0x1
	[0124.632] WriteFile (in: hFile=0x2ec, lpBuffer=0x2bbad8c*, nNumberOfBytesToWrite=0x14140, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2bbad8c*, lpNumberOfBytesWritten=0xafe990*=0x14140, lpOverlapped=0x0) returned 1
	[0124.635] CloseHandle (hObject=0x2ec) returned 1
	[0124.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0124.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx", lpFilePart=0x0) returned 0x29
	[0124.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30
	[0124.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx.rogue", nBufferLength=0x30, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx.rogue", lpFilePart=0x0) returned 0x2f
	[0124.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0124.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\1cp4dikej1.pptx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c7841b0, ftCreationTime.dwHighDateTime=0x1d573ac, ftLastAccessTime.dwLowDateTime=0x5efd8710, ftLastAccessTime.dwHighDateTime=0x1d5c6c8, ftLastWriteTime.dwLowDateTime=0xab8e6448, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x14140)) returned 1
	[0124.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0124.645] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\1cp4dikej1.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\1cp4DiKej1.pptx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\1cp4dikej1.pptx.rogue")) returned 1
	[0124.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0124.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls", lpFilePart=0x0) returned 0x2d
	[0124.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0124.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls" (normalized: "c:\\users\\fd1hvy\\documents\\51qcz extzedbiq.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0124.647] GetFileType (hFile=0x2ec) returned 0x1
	[0124.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0124.647] GetFileType (hFile=0x2ec) returned 0x1
	[0124.647] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x271f
	[0124.648] ReadFile (in: hFile=0x2ec, lpBuffer=0x2bcf134, nNumberOfBytesToRead=0x271f, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2bcf134*, lpNumberOfBytesRead=0xafe99c*=0x271f, lpOverlapped=0x0) returned 1
	[0124.649] CloseHandle (hObject=0x2ec) returned 1
	[0125.279] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0125.279] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0125.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0125.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0125.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0125.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls", lpFilePart=0x0) returned 0x2d
	[0125.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0125.280] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls" (normalized: "c:\\users\\fd1hvy\\documents\\51qcz extzedbiq.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0125.281] GetFileType (hFile=0x2ec) returned 0x1
	[0125.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0125.281] GetFileType (hFile=0x2ec) returned 0x1
	[0125.282] WriteFile (in: hFile=0x2ec, lpBuffer=0x297caec*, nNumberOfBytesToWrite=0x2720, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x297caec*, lpNumberOfBytesWritten=0xafe990*=0x2720, lpOverlapped=0x0) returned 1
	[0125.283] CloseHandle (hObject=0x2ec) returned 1
	[0125.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0125.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls", lpFilePart=0x0) returned 0x2d
	[0125.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0125.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls.rogue", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls.rogue", lpFilePart=0x0) returned 0x33
	[0125.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0125.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls" (normalized: "c:\\users\\fd1hvy\\documents\\51qcz extzedbiq.xls"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3255900, ftCreationTime.dwHighDateTime=0x1d5ef50, ftLastAccessTime.dwLowDateTime=0xc4480eb0, ftLastAccessTime.dwHighDateTime=0x1d5f0f8, ftLastWriteTime.dwLowDateTime=0xabf025a8, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x2720)) returned 1
	[0125.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0125.285] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls" (normalized: "c:\\users\\fd1hvy\\documents\\51qcz extzedbiq.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\51qCz EXtzEdBiQ.xls.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\51qcz extzedbiq.xls.rogue")) returned 1
	[0125.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0125.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx", lpFilePart=0x0) returned 0x2e
	[0125.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0125.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\7dt2_ceucx6xqth.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0125.286] GetFileType (hFile=0x2ec) returned 0x1
	[0125.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0125.286] GetFileType (hFile=0x2ec) returned 0x1
	[0125.286] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x1b44
	[0125.286] ReadFile (in: hFile=0x2ec, lpBuffer=0x297f488, nNumberOfBytesToRead=0x1b44, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x297f488*, lpNumberOfBytesRead=0xafe99c*=0x1b44, lpOverlapped=0x0) returned 1
	[0125.287] CloseHandle (hObject=0x2ec) returned 1
	[0125.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0125.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0125.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0125.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0125.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0125.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx", lpFilePart=0x0) returned 0x2e
	[0125.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0125.389] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\7dt2_ceucx6xqth.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0125.390] GetFileType (hFile=0x2ec) returned 0x1
	[0125.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0125.391] GetFileType (hFile=0x2ec) returned 0x1
	[0125.391] WriteFile (in: hFile=0x2ec, lpBuffer=0x29d4c5c*, nNumberOfBytesToWrite=0x1b50, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x29d4c5c*, lpNumberOfBytesWritten=0xafe990*=0x1b50, lpOverlapped=0x0) returned 1
	[0125.392] CloseHandle (hObject=0x2ec) returned 1
	[0125.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0125.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx", lpFilePart=0x0) returned 0x2e
	[0125.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0125.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx.rogue", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx.rogue", lpFilePart=0x0) returned 0x34
	[0125.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0125.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\7dt2_ceucx6xqth.xlsx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dde8da0, ftCreationTime.dwHighDateTime=0x1d5e520, ftLastAccessTime.dwLowDateTime=0x2e52e3c0, ftLastAccessTime.dwHighDateTime=0x1d5d10a, ftLastWriteTime.dwLowDateTime=0xac00d78b, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x1b50)) returned 1
	[0125.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0125.394] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\7dt2_ceucx6xqth.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\7dT2_CeUcX6xqTH.xlsx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\7dt2_ceucx6xqth.xlsx.rogue")) returned 1
	[0125.394] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0125.394] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx", lpFilePart=0x0) returned 0x23
	[0125.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0125.395] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\8nze.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0125.395] GetFileType (hFile=0x2ec) returned 0x1
	[0125.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0125.395] GetFileType (hFile=0x2ec) returned 0x1
	[0125.395] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x69cc
	[0125.395] ReadFile (in: hFile=0x2ec, lpBuffer=0x29d6a30, nNumberOfBytesToRead=0x69cc, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x29d6a30*, lpNumberOfBytesRead=0xafe99c*=0x69cc, lpOverlapped=0x0) returned 1
	[0125.396] CloseHandle (hObject=0x2ec) returned 1
	[0125.488] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0125.489] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0125.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0125.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0125.489] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0125.489] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx", lpFilePart=0x0) returned 0x23
	[0125.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0125.489] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\8nze.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0125.491] GetFileType (hFile=0x2ec) returned 0x1
	[0125.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0125.491] GetFileType (hFile=0x2ec) returned 0x1
	[0125.491] WriteFile (in: hFile=0x2ec, lpBuffer=0x2a44928*, nNumberOfBytesToWrite=0x69d0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a44928*, lpNumberOfBytesWritten=0xafe990*=0x69d0, lpOverlapped=0x0) returned 1
	[0125.492] CloseHandle (hObject=0x2ec) returned 1
	[0125.494] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0125.494] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx", lpFilePart=0x0) returned 0x23
	[0125.494] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0125.494] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx.rogue", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx.rogue", lpFilePart=0x0) returned 0x29
	[0125.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0125.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\8nze.xlsx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb2d2720, ftCreationTime.dwHighDateTime=0x1d5ec3c, ftLastAccessTime.dwLowDateTime=0x871f8000, ftLastAccessTime.dwHighDateTime=0x1d5e3d7, ftLastWriteTime.dwLowDateTime=0xac0f2473, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x69d0)) returned 1
	[0125.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0125.494] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\8nze.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\8nZe.xlsx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\8nze.xlsx.rogue")) returned 1
	[0125.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0125.509] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx", lpFilePart=0x0) returned 0x2d
	[0125.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0125.509] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\a2zqvjhz_ngcvx.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0125.509] GetFileType (hFile=0x2ec) returned 0x1
	[0125.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0125.509] GetFileType (hFile=0x2ec) returned 0x1
	[0125.509] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x1c45
	[0125.509] ReadFile (in: hFile=0x2ec, lpBuffer=0x2a4b560, nNumberOfBytesToRead=0x1c45, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a4b560*, lpNumberOfBytesRead=0xafe99c*=0x1c45, lpOverlapped=0x0) returned 1
	[0125.510] CloseHandle (hObject=0x2ec) returned 1
	[0125.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0125.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0125.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0125.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0125.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0125.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx", lpFilePart=0x0) returned 0x2d
	[0125.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0125.586] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\a2zqvjhz_ngcvx.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0125.588] GetFileType (hFile=0x2ec) returned 0x1
	[0125.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0125.588] GetFileType (hFile=0x2ec) returned 0x1
	[0125.588] WriteFile (in: hFile=0x2ec, lpBuffer=0x2aa10dc*, nNumberOfBytesToWrite=0x1c50, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2aa10dc*, lpNumberOfBytesWritten=0xafe990*=0x1c50, lpOverlapped=0x0) returned 1
	[0125.590] CloseHandle (hObject=0x2ec) returned 1
	[0125.591] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0125.591] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx", lpFilePart=0x0) returned 0x2d
	[0125.591] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0125.591] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx.rogue", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx.rogue", lpFilePart=0x0) returned 0x33
	[0125.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0125.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\a2zqvjhz_ngcvx.pptx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43082c80, ftCreationTime.dwHighDateTime=0x1d5b819, ftLastAccessTime.dwLowDateTime=0x8ac2be10, ftLastAccessTime.dwHighDateTime=0x1d5a413, ftLastWriteTime.dwLowDateTime=0xac1fd53f, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x1c50)) returned 1
	[0125.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0125.591] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\a2zqvjhz_ngcvx.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\a2zQVJhz_nGcvX.pptx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\a2zqvjhz_ngcvx.pptx.rogue")) returned 1
	[0125.592] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25
	[0125.592] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx", nBufferLength=0x25, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx", lpFilePart=0x0) returned 0x24
	[0125.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0125.592] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ah7hm.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0125.592] GetFileType (hFile=0x2ec) returned 0x1
	[0125.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0125.593] GetFileType (hFile=0x2ec) returned 0x1
	[0125.593] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0xbb5d
	[0125.593] ReadFile (in: hFile=0x2ec, lpBuffer=0x2aa2f94, nNumberOfBytesToRead=0xbb5d, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2aa2f94*, lpNumberOfBytesRead=0xafe99c*=0xbb5d, lpOverlapped=0x0) returned 1
	[0125.593] CloseHandle (hObject=0x2ec) returned 1
	[0125.808] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0125.808] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0125.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0125.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0125.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25
	[0125.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx", nBufferLength=0x25, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx", lpFilePart=0x0) returned 0x24
	[0125.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0125.809] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ah7hm.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0125.812] GetFileType (hFile=0x2ec) returned 0x1
	[0125.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0125.812] GetFileType (hFile=0x2ec) returned 0x1
	[0125.812] WriteFile (in: hFile=0x2ec, lpBuffer=0x2b12fb4*, nNumberOfBytesToWrite=0xbb60, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2b12fb4*, lpNumberOfBytesWritten=0xafe990*=0xbb60, lpOverlapped=0x0) returned 1
	[0125.814] CloseHandle (hObject=0x2ec) returned 1
	[0125.817] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25
	[0125.817] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx", nBufferLength=0x25, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx", lpFilePart=0x0) returned 0x24
	[0125.817] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0125.817] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx.rogue", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx.rogue", lpFilePart=0x0) returned 0x2a
	[0125.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0125.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ah7hm.docx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ca4130, ftCreationTime.dwHighDateTime=0x1d5a8a2, ftLastAccessTime.dwLowDateTime=0xfa5913f0, ftLastAccessTime.dwHighDateTime=0x1d56c46, ftLastWriteTime.dwLowDateTime=0xac41356d, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xbb60)) returned 1
	[0125.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0125.817] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ah7hm.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Ah7hm.docx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\ah7hm.docx.rogue")) returned 1
	[0125.818] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33
	[0125.818] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx", nBufferLength=0x33, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx", lpFilePart=0x0) returned 0x32
	[0125.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0125.818] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ba1hplwp6z8vdt14vqx.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0125.819] GetFileType (hFile=0x2ec) returned 0x1
	[0125.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0125.819] GetFileType (hFile=0x2ec) returned 0x1
	[0125.819] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x18048
	[0125.820] ReadFile (in: hFile=0x2ec, lpBuffer=0x39a3550, nNumberOfBytesToRead=0x18048, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x39a3550*, lpNumberOfBytesRead=0xafe99c*=0x18048, lpOverlapped=0x0) returned 1
	[0125.822] CloseHandle (hObject=0x2ec) returned 1
	[0125.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0125.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0125.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0125.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0125.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33
	[0125.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx", nBufferLength=0x33, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx", lpFilePart=0x0) returned 0x32
	[0125.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0125.989] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ba1hplwp6z8vdt14vqx.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0125.991] GetFileType (hFile=0x2ec) returned 0x1
	[0125.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0125.991] GetFileType (hFile=0x2ec) returned 0x1
	[0125.991] WriteFile (in: hFile=0x2ec, lpBuffer=0x3a1b718*, nNumberOfBytesToWrite=0x18050, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x3a1b718*, lpNumberOfBytesWritten=0xafe990*=0x18050, lpOverlapped=0x0) returned 1
	[0125.993] CloseHandle (hObject=0x2ec) returned 1
	[0126.002] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33
	[0126.002] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx", nBufferLength=0x33, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx", lpFilePart=0x0) returned 0x32
	[0126.002] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39
	[0126.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx.rogue", nBufferLength=0x39, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx.rogue", lpFilePart=0x0) returned 0x38
	[0126.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0126.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ba1hplwp6z8vdt14vqx.docx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd12f6410, ftCreationTime.dwHighDateTime=0x1d5e64a, ftLastAccessTime.dwLowDateTime=0x3c68be90, ftLastAccessTime.dwHighDateTime=0x1d572cc, ftLastWriteTime.dwLowDateTime=0xac5df8a2, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x18050)) returned 1
	[0126.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0126.003] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ba1hplwp6z8vdt14vqx.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\BA1hPLWP6z8VDT14vQX.docx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\ba1hplwp6z8vdt14vqx.docx.rogue")) returned 1
	[0126.006] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0126.006] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx", lpFilePart=0x0) returned 0x33
	[0126.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0126.006] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx" (normalized: "c:\\users\\fd1hvy\\documents\\dm_myvrytnbqhmc616 f.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0126.006] GetFileType (hFile=0x2ec) returned 0x1
	[0126.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0126.006] GetFileType (hFile=0x2ec) returned 0x1
	[0126.006] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x6d45
	[0126.006] ReadFile (in: hFile=0x2ec, lpBuffer=0x29696e4, nNumberOfBytesToRead=0x6d45, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x29696e4*, lpNumberOfBytesRead=0xafe99c*=0x6d45, lpOverlapped=0x0) returned 1
	[0126.007] CloseHandle (hObject=0x2ec) returned 1
	[0126.094] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0126.094] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0126.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0126.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0126.095] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0126.095] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx", lpFilePart=0x0) returned 0x33
	[0126.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0126.095] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx" (normalized: "c:\\users\\fd1hvy\\documents\\dm_myvrytnbqhmc616 f.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0126.096] GetFileType (hFile=0x2ec) returned 0x1
	[0126.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0126.096] GetFileType (hFile=0x2ec) returned 0x1
	[0126.096] WriteFile (in: hFile=0x2ec, lpBuffer=0x29d88bc*, nNumberOfBytesToWrite=0x6d50, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x29d88bc*, lpNumberOfBytesWritten=0xafe990*=0x6d50, lpOverlapped=0x0) returned 1
	[0126.097] CloseHandle (hObject=0x2ec) returned 1
	[0126.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0126.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx", lpFilePart=0x0) returned 0x33
	[0126.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0126.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx.rogue", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx.rogue", lpFilePart=0x0) returned 0x39
	[0126.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0126.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx" (normalized: "c:\\users\\fd1hvy\\documents\\dm_myvrytnbqhmc616 f.docx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x195a16d0, ftCreationTime.dwHighDateTime=0x1d5c342, ftLastAccessTime.dwLowDateTime=0x498ae910, ftLastAccessTime.dwHighDateTime=0x1d5db98, ftLastWriteTime.dwLowDateTime=0xac6c2023, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x6d50)) returned 1
	[0126.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0126.100] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx" (normalized: "c:\\users\\fd1hvy\\documents\\dm_myvrytnbqhmc616 f.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\dM_mYVRYTNbQhMc616 f.docx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\dm_myvrytnbqhmc616 f.docx.rogue")) returned 1
	[0126.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0126.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx", lpFilePart=0x0) returned 0x2e
	[0126.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0126.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\hdx-g-jjh6_xtb7.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0126.100] GetFileType (hFile=0x2ec) returned 0x1
	[0126.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0126.100] GetFileType (hFile=0x2ec) returned 0x1
	[0126.101] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x7baf
	[0126.101] ReadFile (in: hFile=0x2ec, lpBuffer=0x29df8a0, nNumberOfBytesToRead=0x7baf, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x29df8a0*, lpNumberOfBytesRead=0xafe99c*=0x7baf, lpOverlapped=0x0) returned 1
	[0126.109] CloseHandle (hObject=0x2ec) returned 1
	[0126.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0126.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0126.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0126.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0126.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0126.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx", lpFilePart=0x0) returned 0x2e
	[0126.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0126.172] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\hdx-g-jjh6_xtb7.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0126.173] GetFileType (hFile=0x2ec) returned 0x1
	[0126.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0126.173] GetFileType (hFile=0x2ec) returned 0x1
	[0126.173] WriteFile (in: hFile=0x2ec, lpBuffer=0x2a530fc*, nNumberOfBytesToWrite=0x7bb0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a530fc*, lpNumberOfBytesWritten=0xafe990*=0x7bb0, lpOverlapped=0x0) returned 1
	[0126.174] CloseHandle (hObject=0x2ec) returned 1
	[0126.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0126.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx", lpFilePart=0x0) returned 0x2e
	[0126.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0126.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx.rogue", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx.rogue", lpFilePart=0x0) returned 0x34
	[0126.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0126.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\hdx-g-jjh6_xtb7.xlsx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb7dedd0, ftCreationTime.dwHighDateTime=0x1d569c1, ftLastAccessTime.dwLowDateTime=0xa071af30, ftLastAccessTime.dwHighDateTime=0x1d5e3ad, ftLastWriteTime.dwLowDateTime=0xac780b7e, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x7bb0)) returned 1
	[0126.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0126.177] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\hdx-g-jjh6_xtb7.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\hdx-g-JJh6_xTB7.xlsx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\hdx-g-jjh6_xtb7.xlsx.rogue")) returned 1
	[0126.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25
	[0126.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt", nBufferLength=0x25, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt", lpFilePart=0x0) returned 0x24
	[0126.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0126.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt" (normalized: "c:\\users\\fd1hvy\\documents\\hzkphb.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0126.178] GetFileType (hFile=0x2ec) returned 0x1
	[0126.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0126.178] GetFileType (hFile=0x2ec) returned 0x1
	[0126.178] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x5a8e
	[0126.179] ReadFile (in: hFile=0x2ec, lpBuffer=0x2a5af1c, nNumberOfBytesToRead=0x5a8e, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a5af1c*, lpNumberOfBytesRead=0xafe99c*=0x5a8e, lpOverlapped=0x0) returned 1
	[0126.180] CloseHandle (hObject=0x2ec) returned 1
	[0126.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0126.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0126.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0126.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0126.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25
	[0126.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt", nBufferLength=0x25, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt", lpFilePart=0x0) returned 0x24
	[0126.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0126.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt" (normalized: "c:\\users\\fd1hvy\\documents\\hzkphb.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0126.253] GetFileType (hFile=0x2ec) returned 0x1
	[0126.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0126.253] GetFileType (hFile=0x2ec) returned 0x1
	[0126.253] WriteFile (in: hFile=0x2ec, lpBuffer=0x2ac41d8*, nNumberOfBytesToWrite=0x5a90, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2ac41d8*, lpNumberOfBytesWritten=0xafe990*=0x5a90, lpOverlapped=0x0) returned 1
	[0126.254] CloseHandle (hObject=0x2ec) returned 1
	[0126.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25
	[0126.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt", nBufferLength=0x25, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt", lpFilePart=0x0) returned 0x24
	[0126.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0126.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt.rogue", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt.rogue", lpFilePart=0x0) returned 0x2a
	[0126.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0126.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt" (normalized: "c:\\users\\fd1hvy\\documents\\hzkphb.odt"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99c97810, ftCreationTime.dwHighDateTime=0x1d5eb56, ftLastAccessTime.dwLowDateTime=0x73bb7480, ftLastAccessTime.dwHighDateTime=0x1d5e29f, ftLastWriteTime.dwLowDateTime=0xac83f72d, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x5a90)) returned 1
	[0126.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0126.257] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt" (normalized: "c:\\users\\fd1hvy\\documents\\hzkphb.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\HZKPhb.odt.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\hzkphb.odt.rogue")) returned 1
	[0126.257] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0126.257] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx", lpFilePart=0x0) returned 0x23
	[0126.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0126.257] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\joru.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0126.258] GetFileType (hFile=0x2ec) returned 0x1
	[0126.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0126.258] GetFileType (hFile=0x2ec) returned 0x1
	[0126.258] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0xa887
	[0126.258] ReadFile (in: hFile=0x2ec, lpBuffer=0x2ac9eac, nNumberOfBytesToRead=0xa887, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2ac9eac*, lpNumberOfBytesRead=0xafe99c*=0xa887, lpOverlapped=0x0) returned 1
	[0126.259] CloseHandle (hObject=0x2ec) returned 1
	[0126.481] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0126.481] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0126.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0126.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0126.482] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0126.482] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx", lpFilePart=0x0) returned 0x23
	[0126.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0126.482] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\joru.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0126.483] GetFileType (hFile=0x2ec) returned 0x1
	[0126.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0126.483] GetFileType (hFile=0x2ec) returned 0x1
	[0126.483] WriteFile (in: hFile=0x2ec, lpBuffer=0x293cc88*, nNumberOfBytesToWrite=0xa890, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x293cc88*, lpNumberOfBytesWritten=0xafe990*=0xa890, lpOverlapped=0x0) returned 1
	[0126.485] CloseHandle (hObject=0x2ec) returned 1
	[0126.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0126.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx", lpFilePart=0x0) returned 0x23
	[0126.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0126.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx.rogue", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx.rogue", lpFilePart=0x0) returned 0x29
	[0126.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0126.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\joru.xlsx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd71c130, ftCreationTime.dwHighDateTime=0x1d5a254, ftLastAccessTime.dwLowDateTime=0xbd0c4370, ftLastAccessTime.dwHighDateTime=0x1d5ce0a, ftLastWriteTime.dwLowDateTime=0xaca7c715, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xa890)) returned 1
	[0126.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0126.487] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\joru.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jORU.xlsx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\joru.xlsx.rogue")) returned 1
	[0126.487] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0126.487] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx", lpFilePart=0x0) returned 0x2e
	[0126.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0126.487] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jw j1ybh26ebyri.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0126.488] GetFileType (hFile=0x2ec) returned 0x1
	[0126.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0126.488] GetFileType (hFile=0x2ec) returned 0x1
	[0126.488] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x10a36
	[0126.488] ReadFile (in: hFile=0x2ec, lpBuffer=0x294776c, nNumberOfBytesToRead=0x10a36, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x294776c*, lpNumberOfBytesRead=0xafe99c*=0x10a36, lpOverlapped=0x0) returned 1
	[0126.489] CloseHandle (hObject=0x2ec) returned 1
	[0126.750] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0126.750] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0126.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0126.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0126.751] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0126.751] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx", lpFilePart=0x0) returned 0x2e
	[0126.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0126.751] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jw j1ybh26ebyri.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0126.753] GetFileType (hFile=0x2ec) returned 0x1
	[0126.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0126.753] GetFileType (hFile=0x2ec) returned 0x1
	[0126.753] WriteFile (in: hFile=0x2ec, lpBuffer=0x29c6588*, nNumberOfBytesToWrite=0x10a40, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x29c6588*, lpNumberOfBytesWritten=0xafe990*=0x10a40, lpOverlapped=0x0) returned 1
	[0126.756] CloseHandle (hObject=0x2ec) returned 1
	[0126.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0126.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx", lpFilePart=0x0) returned 0x2e
	[0126.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0126.759] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx.rogue", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx.rogue", lpFilePart=0x0) returned 0x34
	[0126.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0126.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jw j1ybh26ebyri.xlsx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51807530, ftCreationTime.dwHighDateTime=0x1d5c32f, ftLastAccessTime.dwLowDateTime=0xa494e930, ftLastAccessTime.dwHighDateTime=0x1d5e504, ftLastWriteTime.dwLowDateTime=0xacd042f8, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x10a40)) returned 1
	[0126.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0126.759] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jw j1ybh26ebyri.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\JW j1YBH26EbYrI.xlsx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\jw j1ybh26ebyri.xlsx.rogue")) returned 1
	[0126.760] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26
	[0126.760] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc", nBufferLength=0x26, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc", lpFilePart=0x0) returned 0x25
	[0126.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0126.760] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc" (normalized: "c:\\users\\fd1hvy\\documents\\ml5281i.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0126.760] GetFileType (hFile=0x2ec) returned 0x1
	[0126.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0126.761] GetFileType (hFile=0x2ec) returned 0x1
	[0126.761] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x91a8
	[0126.761] ReadFile (in: hFile=0x2ec, lpBuffer=0x29d7238, nNumberOfBytesToRead=0x91a8, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x29d7238*, lpNumberOfBytesRead=0xafe99c*=0x91a8, lpOverlapped=0x0) returned 1
	[0126.762] CloseHandle (hObject=0x2ec) returned 1
	[0126.863] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0126.863] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0126.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0126.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0126.864] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26
	[0126.864] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc", nBufferLength=0x26, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc", lpFilePart=0x0) returned 0x25
	[0126.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0126.864] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc" (normalized: "c:\\users\\fd1hvy\\documents\\ml5281i.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0126.866] GetFileType (hFile=0x2ec) returned 0x1
	[0126.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0126.866] GetFileType (hFile=0x2ec) returned 0x1
	[0126.866] WriteFile (in: hFile=0x2ec, lpBuffer=0x2a51890*, nNumberOfBytesToWrite=0x91b0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a51890*, lpNumberOfBytesWritten=0xafe990*=0x91b0, lpOverlapped=0x0) returned 1
	[0126.868] CloseHandle (hObject=0x2ec) returned 1
	[0126.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26
	[0126.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc", nBufferLength=0x26, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc", lpFilePart=0x0) returned 0x25
	[0126.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0126.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc.rogue", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc.rogue", lpFilePart=0x0) returned 0x2b
	[0126.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0126.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc" (normalized: "c:\\users\\fd1hvy\\documents\\ml5281i.doc"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4760e0, ftCreationTime.dwHighDateTime=0x1d5ec9f, ftLastAccessTime.dwLowDateTime=0x98c64a10, ftLastAccessTime.dwHighDateTime=0x1d5ed31, ftLastWriteTime.dwLowDateTime=0xace0f2e7, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x91b0)) returned 1
	[0126.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0126.881] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc" (normalized: "c:\\users\\fd1hvy\\documents\\ml5281i.doc"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\ml5281I.doc.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\ml5281i.doc.rogue")) returned 1
	[0126.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29
	[0126.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx", nBufferLength=0x29, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx", lpFilePart=0x0) returned 0x28
	[0126.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0126.882] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\nk8vcudok.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0126.883] GetFileType (hFile=0x2ec) returned 0x1
	[0126.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0126.883] GetFileType (hFile=0x2ec) returned 0x1
	[0126.883] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x968e
	[0126.883] ReadFile (in: hFile=0x2ec, lpBuffer=0x2a5ac90, nNumberOfBytesToRead=0x968e, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a5ac90*, lpNumberOfBytesRead=0xafe99c*=0x968e, lpOverlapped=0x0) returned 1
	[0126.884] CloseHandle (hObject=0x2ec) returned 1
	[0127.002] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0127.002] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0127.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0127.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0127.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29
	[0127.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx", nBufferLength=0x29, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx", lpFilePart=0x0) returned 0x28
	[0127.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0127.003] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\nk8vcudok.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.005] GetFileType (hFile=0x2ec) returned 0x1
	[0127.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0127.005] GetFileType (hFile=0x2ec) returned 0x1
	[0127.005] WriteFile (in: hFile=0x2ec, lpBuffer=0x2ad6b4c*, nNumberOfBytesToWrite=0x9690, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2ad6b4c*, lpNumberOfBytesWritten=0xafe990*=0x9690, lpOverlapped=0x0) returned 1
	[0127.007] CloseHandle (hObject=0x2ec) returned 1
	[0127.009] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29
	[0127.009] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx", nBufferLength=0x29, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx", lpFilePart=0x0) returned 0x28
	[0127.009] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0127.009] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx.rogue", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx.rogue", lpFilePart=0x0) returned 0x2e
	[0127.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0127.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\nk8vcudok.pptx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7847930, ftCreationTime.dwHighDateTime=0x1d58118, ftLastAccessTime.dwLowDateTime=0x56a53a90, ftLastAccessTime.dwHighDateTime=0x1d564a8, ftLastWriteTime.dwLowDateTime=0xacf6688b, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x9690)) returned 1
	[0127.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0127.010] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\nk8vcudok.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\nK8vcUdOk.pptx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\nk8vcudok.pptx.rogue")) returned 1
	[0127.011] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0127.011] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx", lpFilePart=0x0) returned 0x26
	[0127.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0127.011] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx" (normalized: "c:\\users\\fd1hvy\\documents\\qwxfmjl.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.011] GetFileType (hFile=0x2ec) returned 0x1
	[0127.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0127.011] GetFileType (hFile=0x2ec) returned 0x1
	[0127.012] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x18fbe
	[0127.013] ReadFile (in: hFile=0x2ec, lpBuffer=0x3a69d28, nNumberOfBytesToRead=0x18fbe, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x3a69d28*, lpNumberOfBytesRead=0xafe99c*=0x18fbe, lpOverlapped=0x0) returned 1
	[0127.015] CloseHandle (hObject=0x2ec) returned 1
	[0127.109] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0127.109] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0127.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0127.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0127.109] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0127.109] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx", lpFilePart=0x0) returned 0x26
	[0127.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0127.110] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx" (normalized: "c:\\users\\fd1hvy\\documents\\qwxfmjl.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.112] GetFileType (hFile=0x2ec) returned 0x1
	[0127.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0127.112] GetFileType (hFile=0x2ec) returned 0x1
	[0127.112] WriteFile (in: hFile=0x2ec, lpBuffer=0x3ae6c28*, nNumberOfBytesToWrite=0x18fc0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x3ae6c28*, lpNumberOfBytesWritten=0xafe990*=0x18fc0, lpOverlapped=0x0) returned 1
	[0127.115] CloseHandle (hObject=0x2ec) returned 1
	[0127.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0127.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx", lpFilePart=0x0) returned 0x26
	[0127.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0127.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx.rogue", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx.rogue", lpFilePart=0x0) returned 0x2c
	[0127.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0127.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx" (normalized: "c:\\users\\fd1hvy\\documents\\qwxfmjl.docx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ca1c690, ftCreationTime.dwHighDateTime=0x1d5e2e5, ftLastAccessTime.dwLowDateTime=0xf9ef730, ftLastAccessTime.dwHighDateTime=0x1d5a166, ftLastWriteTime.dwLowDateTime=0xad0719bf, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x18fc0)) returned 1
	[0127.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0127.119] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx" (normalized: "c:\\users\\fd1hvy\\documents\\qwxfmjl.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\qWXfMJl.docx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\qwxfmjl.docx.rogue")) returned 1
	[0127.141] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30
	[0127.141] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx", nBufferLength=0x30, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx", lpFilePart=0x0) returned 0x2f
	[0127.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0127.141] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx" (normalized: "c:\\users\\fd1hvy\\documents\\qzakc3eyym7pwfft.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.141] GetFileType (hFile=0x2ec) returned 0x1
	[0127.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0127.141] GetFileType (hFile=0x2ec) returned 0x1
	[0127.141] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x16f13
	[0127.142] ReadFile (in: hFile=0x2ec, lpBuffer=0x3affc08, nNumberOfBytesToRead=0x16f13, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x3affc08*, lpNumberOfBytesRead=0xafe99c*=0x16f13, lpOverlapped=0x0) returned 1
	[0127.145] CloseHandle (hObject=0x2ec) returned 1
	[0127.316] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0127.316] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0127.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0127.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0127.317] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30
	[0127.317] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx", nBufferLength=0x30, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx", lpFilePart=0x0) returned 0x2f
	[0127.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0127.317] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx" (normalized: "c:\\users\\fd1hvy\\documents\\qzakc3eyym7pwfft.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.319] GetFileType (hFile=0x2ec) returned 0x1
	[0127.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0127.319] GetFileType (hFile=0x2ec) returned 0x1
	[0127.319] WriteFile (in: hFile=0x2ec, lpBuffer=0x3b727d8*, nNumberOfBytesToWrite=0x16f20, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x3b727d8*, lpNumberOfBytesWritten=0xafe990*=0x16f20, lpOverlapped=0x0) returned 1
	[0127.322] CloseHandle (hObject=0x2ec) returned 1
	[0127.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30
	[0127.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx", nBufferLength=0x30, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx", lpFilePart=0x0) returned 0x2f
	[0127.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0127.328] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx.rogue", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx.rogue", lpFilePart=0x0) returned 0x35
	[0127.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0127.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx" (normalized: "c:\\users\\fd1hvy\\documents\\qzakc3eyym7pwfft.docx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65235760, ftCreationTime.dwHighDateTime=0x1d5c096, ftLastAccessTime.dwLowDateTime=0x537737c0, ftLastAccessTime.dwHighDateTime=0x1d5a354, ftLastWriteTime.dwLowDateTime=0xad287a43, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x16f20)) returned 1
	[0127.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0127.328] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx" (normalized: "c:\\users\\fd1hvy\\documents\\qzakc3eyym7pwfft.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Qzakc3EYYm7PWFft.docx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\qzakc3eyym7pwfft.docx.rogue")) returned 1
	[0127.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0127.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx", lpFilePart=0x0) returned 0x23
	[0127.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0127.329] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ttcs.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.329] GetFileType (hFile=0x2ec) returned 0x1
	[0127.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0127.329] GetFileType (hFile=0x2ec) returned 0x1
	[0127.330] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x26d0
	[0127.330] ReadFile (in: hFile=0x2ec, lpBuffer=0x296f918, nNumberOfBytesToRead=0x26d0, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x296f918*, lpNumberOfBytesRead=0xafe99c*=0x26d0, lpOverlapped=0x0) returned 1
	[0127.331] CloseHandle (hObject=0x2ec) returned 1
	[0127.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0127.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0127.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0127.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0127.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0127.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx", lpFilePart=0x0) returned 0x23
	[0127.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0127.408] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ttcs.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.410] GetFileType (hFile=0x2ec) returned 0x1
	[0127.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0127.410] GetFileType (hFile=0x2ec) returned 0x1
	[0127.410] WriteFile (in: hFile=0x2ec, lpBuffer=0x29c8abc*, nNumberOfBytesToWrite=0x26e0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x29c8abc*, lpNumberOfBytesWritten=0xafe990*=0x26e0, lpOverlapped=0x0) returned 1
	[0127.411] CloseHandle (hObject=0x2ec) returned 1
	[0127.413] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0127.413] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx", lpFilePart=0x0) returned 0x23
	[0127.413] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0127.413] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx.rogue", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx.rogue", lpFilePart=0x0) returned 0x29
	[0127.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0127.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ttcs.pptx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe001bd80, ftCreationTime.dwHighDateTime=0x1d5e3d4, ftLastAccessTime.dwLowDateTime=0x2a17c710, ftLastAccessTime.dwHighDateTime=0x1d58deb, ftLastWriteTime.dwLowDateTime=0xad346636, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x26e0)) returned 1
	[0127.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0127.413] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ttcs.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\tTCs.pptx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\ttcs.pptx.rogue")) returned 1
	[0127.414] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0127.414] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx", lpFilePart=0x0) returned 0x23
	[0127.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0127.415] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\vjxv.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.415] GetFileType (hFile=0x2ec) returned 0x1
	[0127.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0127.415] GetFileType (hFile=0x2ec) returned 0x1
	[0127.415] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x975c
	[0127.415] ReadFile (in: hFile=0x2ec, lpBuffer=0x29cb3d8, nNumberOfBytesToRead=0x975c, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x29cb3d8*, lpNumberOfBytesRead=0xafe99c*=0x975c, lpOverlapped=0x0) returned 1
	[0127.416] CloseHandle (hObject=0x2ec) returned 1
	[0127.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0127.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0127.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0127.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0127.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0127.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx", lpFilePart=0x0) returned 0x23
	[0127.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0127.492] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\vjxv.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.494] GetFileType (hFile=0x2ec) returned 0x1
	[0127.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0127.494] GetFileType (hFile=0x2ec) returned 0x1
	[0127.494] WriteFile (in: hFile=0x2ec, lpBuffer=0x2a476a0*, nNumberOfBytesToWrite=0x9760, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a476a0*, lpNumberOfBytesWritten=0xafe990*=0x9760, lpOverlapped=0x0) returned 1
	[0127.500] CloseHandle (hObject=0x2ec) returned 1
	[0127.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0127.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx", lpFilePart=0x0) returned 0x23
	[0127.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0127.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx.rogue", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx.rogue", lpFilePart=0x0) returned 0x29
	[0127.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0127.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\vjxv.xlsx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9bf8ed0, ftCreationTime.dwHighDateTime=0x1d5ae39, ftLastAccessTime.dwLowDateTime=0xf7168800, ftLastAccessTime.dwHighDateTime=0x1d5c89c, ftLastWriteTime.dwLowDateTime=0xad42b3b1, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x9760)) returned 1
	[0127.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0127.507] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\vjxv.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Vjxv.xlsx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\vjxv.xlsx.rogue")) returned 1
	[0127.508] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0127.508] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx", lpFilePart=0x0) returned 0x26
	[0127.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0127.508] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\vokwphl.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.508] GetFileType (hFile=0x2ec) returned 0x1
	[0127.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0127.509] GetFileType (hFile=0x2ec) returned 0x1
	[0127.509] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0xe0a1
	[0127.509] ReadFile (in: hFile=0x2ec, lpBuffer=0x2a51044, nNumberOfBytesToRead=0xe0a1, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a51044*, lpNumberOfBytesRead=0xafe99c*=0xe0a1, lpOverlapped=0x0) returned 1
	[0127.510] CloseHandle (hObject=0x2ec) returned 1
	[0127.578] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0127.578] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0127.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0127.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0127.578] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0127.578] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx", lpFilePart=0x0) returned 0x26
	[0127.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0127.578] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\vokwphl.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.579] GetFileType (hFile=0x2ec) returned 0x1
	[0127.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0127.580] GetFileType (hFile=0x2ec) returned 0x1
	[0127.580] WriteFile (in: hFile=0x2ec, lpBuffer=0x2ac8054*, nNumberOfBytesToWrite=0xe0b0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2ac8054*, lpNumberOfBytesWritten=0xafe990*=0xe0b0, lpOverlapped=0x0) returned 1
	[0127.581] CloseHandle (hObject=0x2ec) returned 1
	[0127.584] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0127.584] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx", lpFilePart=0x0) returned 0x26
	[0127.584] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0127.585] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx.rogue", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx.rogue", lpFilePart=0x0) returned 0x2c
	[0127.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0127.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\vokwphl.pptx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f47c5a0, ftCreationTime.dwHighDateTime=0x1d5ea9a, ftLastAccessTime.dwLowDateTime=0x60789870, ftLastAccessTime.dwHighDateTime=0x1d5dacb, ftLastWriteTime.dwLowDateTime=0xad4ea4d8, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xe0b0)) returned 1
	[0127.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0127.585] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\vokwphl.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\voKwPHL.pptx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\vokwphl.pptx.rogue")) returned 1
	[0127.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0127.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx", lpFilePart=0x0) returned 0x30
	[0127.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0127.586] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx" (normalized: "c:\\users\\fd1hvy\\documents\\y50f_oqxgswvvottw.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.586] GetFileType (hFile=0x2ec) returned 0x1
	[0127.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0127.586] GetFileType (hFile=0x2ec) returned 0x1
	[0127.586] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x942e
	[0127.586] ReadFile (in: hFile=0x2ec, lpBuffer=0x2ad636c, nNumberOfBytesToRead=0x942e, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2ad636c*, lpNumberOfBytesRead=0xafe99c*=0x942e, lpOverlapped=0x0) returned 1
	[0127.587] CloseHandle (hObject=0x2ec) returned 1
	[0127.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0127.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0127.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0127.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0127.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0127.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx", lpFilePart=0x0) returned 0x30
	[0127.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0127.621] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx" (normalized: "c:\\users\\fd1hvy\\documents\\y50f_oqxgswvvottw.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.622] GetFileType (hFile=0x2ec) returned 0x1
	[0127.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0127.622] GetFileType (hFile=0x2ec) returned 0x1
	[0127.622] WriteFile (in: hFile=0x2ec, lpBuffer=0x2960944*, nNumberOfBytesToWrite=0x9430, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2960944*, lpNumberOfBytesWritten=0xafe990*=0x9430, lpOverlapped=0x0) returned 1
	[0127.623] CloseHandle (hObject=0x2ec) returned 1
	[0127.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0127.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx", lpFilePart=0x0) returned 0x30
	[0127.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37
	[0127.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx.rogue", nBufferLength=0x37, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx.rogue", lpFilePart=0x0) returned 0x36
	[0127.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0127.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx" (normalized: "c:\\users\\fd1hvy\\documents\\y50f_oqxgswvvottw.docx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b704f90, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0x7fb0ff80, ftLastAccessTime.dwHighDateTime=0x1d5ec2c, ftLastWriteTime.dwLowDateTime=0xad55c68b, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x9430)) returned 1
	[0127.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0127.625] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx" (normalized: "c:\\users\\fd1hvy\\documents\\y50f_oqxgswvvottw.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\y50F_oqxgSWVvOtTw.docx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\y50f_oqxgswvvottw.docx.rogue")) returned 1
	[0127.626] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0127.626] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx", lpFilePart=0x0) returned 0x29
	[0127.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0127.626] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\_arb4x9djd.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.626] GetFileType (hFile=0x2ec) returned 0x1
	[0127.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0127.626] GetFileType (hFile=0x2ec) returned 0x1
	[0127.626] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0xd09
	[0127.626] ReadFile (in: hFile=0x2ec, lpBuffer=0x296ad0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x296ad0c*, lpNumberOfBytesRead=0xafe99c*=0xd09, lpOverlapped=0x0) returned 1
	[0127.627] CloseHandle (hObject=0x2ec) returned 1
	[0127.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0127.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0127.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0127.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0127.778] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0127.778] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx", lpFilePart=0x0) returned 0x29
	[0127.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0127.778] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\_arb4x9djd.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.779] GetFileType (hFile=0x2ec) returned 0x1
	[0127.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0127.779] GetFileType (hFile=0x2ec) returned 0x1
	[0127.779] WriteFile (in: hFile=0x2ec, lpBuffer=0x29bcefc*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0xafe964, lpOverlapped=0x0 | out: lpBuffer=0x29bcefc*, lpNumberOfBytesWritten=0xafe964*=0xd10, lpOverlapped=0x0) returned 1
	[0127.780] CloseHandle (hObject=0x2ec) returned 1
	[0127.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0127.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx", lpFilePart=0x0) returned 0x29
	[0127.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30
	[0127.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx.rogue", nBufferLength=0x30, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx.rogue", lpFilePart=0x0) returned 0x2f
	[0127.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0127.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\_arb4x9djd.xlsx"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7679a10, ftCreationTime.dwHighDateTime=0x1d5e20a, ftLastAccessTime.dwLowDateTime=0xf1f77e10, ftLastAccessTime.dwHighDateTime=0x1d5ec82, ftLastWriteTime.dwLowDateTime=0xad6d9e41, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1
	[0127.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0127.781] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\_arb4x9djd.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_arB4x9DjD.xlsx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\_arb4x9djd.xlsx.rogue")) returned 1
	[0127.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0127.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0127.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz", lpFilePart=0x0) returned 0x29
	[0127.782] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ff50860, ftCreationTime.dwHighDateTime=0x1d5f05b, ftLastAccessTime.dwLowDateTime=0x951b6f00, ftLastAccessTime.dwHighDateTime=0x1d5ee38, ftLastWriteTime.dwLowDateTime=0x951b6f00, ftLastWriteTime.dwHighDateTime=0x1d5ee38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd61e8
	[0127.783] FindNextFileW (in: hFindFile=0xdd61e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ff50860, ftCreationTime.dwHighDateTime=0x1d5f05b, ftLastAccessTime.dwLowDateTime=0x951b6f00, ftLastAccessTime.dwHighDateTime=0x1d5ee38, ftLastWriteTime.dwLowDateTime=0x951b6f00, ftLastWriteTime.dwHighDateTime=0x1d5ee38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0127.783] FindNextFileW (in: hFindFile=0xdd61e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc669b440, ftCreationTime.dwHighDateTime=0x1d5e686, ftLastAccessTime.dwLowDateTime=0xd826f820, ftLastAccessTime.dwHighDateTime=0x1d5ea30, ftLastWriteTime.dwLowDateTime=0xd826f820, ftLastWriteTime.dwHighDateTime=0x1d5ea30, nFileSizeHigh=0x0, nFileSizeLow=0x5f35, dwReserved0=0x0, dwReserved1=0x0, cFileName="BN1Ls0GpPSVtI4.xls", cAlternateFileName="BN1LS0~1.XLS")) returned 1
	[0127.783] FindNextFileW (in: hFindFile=0xdd61e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a4ff180, ftCreationTime.dwHighDateTime=0x1d5ea64, ftLastAccessTime.dwLowDateTime=0x1d02c320, ftLastAccessTime.dwHighDateTime=0x1d5e0f4, ftLastWriteTime.dwLowDateTime=0x1d02c320, ftLastWriteTime.dwHighDateTime=0x1d5e0f4, nFileSizeHigh=0x0, nFileSizeLow=0x15e59, dwReserved0=0x0, dwReserved1=0x0, cFileName="eitGL7zniQSMg4R6WX-.ods", cAlternateFileName="EITGL7~1.ODS")) returned 1
	[0127.783] FindNextFileW (in: hFindFile=0xdd61e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81f5b10, ftCreationTime.dwHighDateTime=0x1d5e8cb, ftLastAccessTime.dwLowDateTime=0x18dd4230, ftLastAccessTime.dwHighDateTime=0x1d5e45e, ftLastWriteTime.dwLowDateTime=0x18dd4230, ftLastWriteTime.dwHighDateTime=0x1d5e45e, nFileSizeHigh=0x0, nFileSizeLow=0xd6a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="hkS7uRPmhXySw1sBf.ods", cAlternateFileName="HKS7UR~1.ODS")) returned 1
	[0127.783] FindNextFileW (in: hFindFile=0xdd61e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e2e6b0, ftCreationTime.dwHighDateTime=0x1d5ef57, ftLastAccessTime.dwLowDateTime=0x484bafe0, ftLastAccessTime.dwHighDateTime=0x1d5ed3f, ftLastWriteTime.dwLowDateTime=0x484bafe0, ftLastWriteTime.dwHighDateTime=0x1d5ed3f, nFileSizeHigh=0x0, nFileSizeLow=0x73d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="mUjk_.pptx", cAlternateFileName="MUJK_~1.PPT")) returned 1
	[0127.784] FindNextFileW (in: hFindFile=0xdd61e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bce35d0, ftCreationTime.dwHighDateTime=0x1d5eb3c, ftLastAccessTime.dwLowDateTime=0x6f59f00, ftLastAccessTime.dwHighDateTime=0x1d5f083, ftLastWriteTime.dwLowDateTime=0x6f59f00, ftLastWriteTime.dwHighDateTime=0x1d5f083, nFileSizeHigh=0x0, nFileSizeLow=0x7ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mw7FMZgh73aaR_8Tc.odt", cAlternateFileName="MW7FMZ~1.ODT")) returned 1
	[0127.784] FindNextFileW (in: hFindFile=0xdd61e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0127.784] FindClose (in: hFindFile=0xdd61e8 | out: hFindFile=0xdd61e8) returned 1
	[0127.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0127.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0127.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0127.784] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0127.784] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz", lpFilePart=0x0) returned 0x29
	[0127.784] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ff50860, ftCreationTime.dwHighDateTime=0x1d5f05b, ftLastAccessTime.dwLowDateTime=0x951b6f00, ftLastAccessTime.dwHighDateTime=0x1d5ee38, ftLastWriteTime.dwLowDateTime=0x951b6f00, ftLastWriteTime.dwHighDateTime=0x1d5ee38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6468
	[0127.784] FindNextFileW (in: hFindFile=0xdd6468, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ff50860, ftCreationTime.dwHighDateTime=0x1d5f05b, ftLastAccessTime.dwLowDateTime=0x951b6f00, ftLastAccessTime.dwHighDateTime=0x1d5ee38, ftLastWriteTime.dwLowDateTime=0x951b6f00, ftLastWriteTime.dwHighDateTime=0x1d5ee38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0127.785] FindNextFileW (in: hFindFile=0xdd6468, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc669b440, ftCreationTime.dwHighDateTime=0x1d5e686, ftLastAccessTime.dwLowDateTime=0xd826f820, ftLastAccessTime.dwHighDateTime=0x1d5ea30, ftLastWriteTime.dwLowDateTime=0xd826f820, ftLastWriteTime.dwHighDateTime=0x1d5ea30, nFileSizeHigh=0x0, nFileSizeLow=0x5f35, dwReserved0=0x0, dwReserved1=0x0, cFileName="BN1Ls0GpPSVtI4.xls", cAlternateFileName="BN1LS0~1.XLS")) returned 1
	[0127.785] FindNextFileW (in: hFindFile=0xdd6468, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a4ff180, ftCreationTime.dwHighDateTime=0x1d5ea64, ftLastAccessTime.dwLowDateTime=0x1d02c320, ftLastAccessTime.dwHighDateTime=0x1d5e0f4, ftLastWriteTime.dwLowDateTime=0x1d02c320, ftLastWriteTime.dwHighDateTime=0x1d5e0f4, nFileSizeHigh=0x0, nFileSizeLow=0x15e59, dwReserved0=0x0, dwReserved1=0x0, cFileName="eitGL7zniQSMg4R6WX-.ods", cAlternateFileName="EITGL7~1.ODS")) returned 1
	[0127.785] FindNextFileW (in: hFindFile=0xdd6468, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81f5b10, ftCreationTime.dwHighDateTime=0x1d5e8cb, ftLastAccessTime.dwLowDateTime=0x18dd4230, ftLastAccessTime.dwHighDateTime=0x1d5e45e, ftLastWriteTime.dwLowDateTime=0x18dd4230, ftLastWriteTime.dwHighDateTime=0x1d5e45e, nFileSizeHigh=0x0, nFileSizeLow=0xd6a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="hkS7uRPmhXySw1sBf.ods", cAlternateFileName="HKS7UR~1.ODS")) returned 1
	[0127.785] FindNextFileW (in: hFindFile=0xdd6468, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e2e6b0, ftCreationTime.dwHighDateTime=0x1d5ef57, ftLastAccessTime.dwLowDateTime=0x484bafe0, ftLastAccessTime.dwHighDateTime=0x1d5ed3f, ftLastWriteTime.dwLowDateTime=0x484bafe0, ftLastWriteTime.dwHighDateTime=0x1d5ed3f, nFileSizeHigh=0x0, nFileSizeLow=0x73d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="mUjk_.pptx", cAlternateFileName="MUJK_~1.PPT")) returned 1
	[0127.785] FindNextFileW (in: hFindFile=0xdd6468, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bce35d0, ftCreationTime.dwHighDateTime=0x1d5eb3c, ftLastAccessTime.dwLowDateTime=0x6f59f00, ftLastAccessTime.dwHighDateTime=0x1d5f083, ftLastWriteTime.dwLowDateTime=0x6f59f00, ftLastWriteTime.dwHighDateTime=0x1d5f083, nFileSizeHigh=0x0, nFileSizeLow=0x7ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mw7FMZgh73aaR_8Tc.odt", cAlternateFileName="MW7FMZ~1.ODT")) returned 1
	[0127.785] FindNextFileW (in: hFindFile=0xdd6468, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bce35d0, ftCreationTime.dwHighDateTime=0x1d5eb3c, ftLastAccessTime.dwLowDateTime=0x6f59f00, ftLastAccessTime.dwHighDateTime=0x1d5f083, ftLastWriteTime.dwLowDateTime=0x6f59f00, ftLastWriteTime.dwHighDateTime=0x1d5f083, nFileSizeHigh=0x0, nFileSizeLow=0x7ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mw7FMZgh73aaR_8Tc.odt", cAlternateFileName="MW7FMZ~1.ODT")) returned 0
	[0127.786] FindClose (in: hFindFile=0xdd6468 | out: hFindFile=0xdd6468) returned 1
	[0127.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0127.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0127.786] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d
	[0127.786] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls", nBufferLength=0x3d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls", lpFilePart=0x0) returned 0x3c
	[0127.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0127.786] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\bn1ls0gppsvti4.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.786] GetFileType (hFile=0x2ec) returned 0x1
	[0127.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0127.786] GetFileType (hFile=0x2ec) returned 0x1
	[0127.786] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x5f35
	[0127.786] ReadFile (in: hFile=0x2ec, lpBuffer=0x29bfc58, nNumberOfBytesToRead=0x5f35, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x29bfc58*, lpNumberOfBytesRead=0xafe928*=0x5f35, lpOverlapped=0x0) returned 1
	[0127.787] CloseHandle (hObject=0x2ec) returned 1
	[0127.803] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0127.803] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0127.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0127.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0127.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d
	[0127.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls", nBufferLength=0x3d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls", lpFilePart=0x0) returned 0x3c
	[0127.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0127.804] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\bn1ls0gppsvti4.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.805] GetFileType (hFile=0x2ec) returned 0x1
	[0127.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0127.805] GetFileType (hFile=0x2ec) returned 0x1
	[0127.805] WriteFile (in: hFile=0x2ec, lpBuffer=0x2a2a684*, nNumberOfBytesToWrite=0x5f40, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2a2a684*, lpNumberOfBytesWritten=0xafe91c*=0x5f40, lpOverlapped=0x0) returned 1
	[0127.806] CloseHandle (hObject=0x2ec) returned 1
	[0127.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d
	[0127.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls", nBufferLength=0x3d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls", lpFilePart=0x0) returned 0x3c
	[0127.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43
	[0127.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls.rogue", nBufferLength=0x43, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls.rogue", lpFilePart=0x0) returned 0x42
	[0127.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0127.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\bn1ls0gppsvti4.xls"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc669b440, ftCreationTime.dwHighDateTime=0x1d5e686, ftLastAccessTime.dwLowDateTime=0xd826f820, ftLastAccessTime.dwHighDateTime=0x1d5ea30, ftLastWriteTime.dwLowDateTime=0xad726305, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x5f40)) returned 1
	[0127.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0127.809] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\bn1ls0gppsvti4.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\BN1Ls0GpPSVtI4.xls.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\bn1ls0gppsvti4.xls.rogue")) returned 1
	[0127.812] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0127.812] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx", lpFilePart=0x0) returned 0x34
	[0127.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0127.812] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\mujk_.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.812] GetFileType (hFile=0x2ec) returned 0x1
	[0127.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0127.812] GetFileType (hFile=0x2ec) returned 0x1
	[0127.812] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x73d1
	[0127.812] ReadFile (in: hFile=0x2ec, lpBuffer=0x2a3087c, nNumberOfBytesToRead=0x73d1, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2a3087c*, lpNumberOfBytesRead=0xafe928*=0x73d1, lpOverlapped=0x0) returned 1
	[0127.813] CloseHandle (hObject=0x2ec) returned 1
	[0127.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0127.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0127.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0127.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0127.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0127.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx", lpFilePart=0x0) returned 0x34
	[0127.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0127.840] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\mujk_.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.842] GetFileType (hFile=0x2ec) returned 0x1
	[0127.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0127.842] GetFileType (hFile=0x2ec) returned 0x1
	[0127.842] WriteFile (in: hFile=0x2ec, lpBuffer=0x2aa19c8*, nNumberOfBytesToWrite=0x73e0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2aa19c8*, lpNumberOfBytesWritten=0xafe91c*=0x73e0, lpOverlapped=0x0) returned 1
	[0127.844] CloseHandle (hObject=0x2ec) returned 1
	[0127.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0127.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx", lpFilePart=0x0) returned 0x34
	[0127.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b
	[0127.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx.rogue", nBufferLength=0x3b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx.rogue", lpFilePart=0x0) returned 0x3a
	[0127.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0127.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\mujk_.pptx"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e2e6b0, ftCreationTime.dwHighDateTime=0x1d5ef57, ftLastAccessTime.dwLowDateTime=0x484bafe0, ftLastAccessTime.dwHighDateTime=0x1d5ed3f, ftLastWriteTime.dwLowDateTime=0xad772762, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x73e0)) returned 1
	[0127.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0127.847] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\mujk_.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\mUjk_.pptx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\mujk_.pptx.rogue")) returned 1
	[0127.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40
	[0127.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt", nBufferLength=0x40, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt", lpFilePart=0x0) returned 0x3f
	[0127.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0127.848] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\mw7fmzgh73aar_8tc.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.848] GetFileType (hFile=0x2ec) returned 0x1
	[0127.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0127.848] GetFileType (hFile=0x2ec) returned 0x1
	[0127.848] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x7ab8
	[0127.848] ReadFile (in: hFile=0x2ec, lpBuffer=0x2aa9024, nNumberOfBytesToRead=0x7ab8, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2aa9024*, lpNumberOfBytesRead=0xafe928*=0x7ab8, lpOverlapped=0x0) returned 1
	[0127.849] CloseHandle (hObject=0x2ec) returned 1
	[0127.877] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0127.877] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0127.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0127.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0127.877] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40
	[0127.877] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt", nBufferLength=0x40, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt", lpFilePart=0x0) returned 0x3f
	[0127.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0127.877] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\mw7fmzgh73aar_8tc.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.879] GetFileType (hFile=0x2ec) returned 0x1
	[0127.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0127.879] GetFileType (hFile=0x2ec) returned 0x1
	[0127.879] WriteFile (in: hFile=0x2ec, lpBuffer=0x2b1c3cc*, nNumberOfBytesToWrite=0x7ac0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2b1c3cc*, lpNumberOfBytesWritten=0xafe91c*=0x7ac0, lpOverlapped=0x0) returned 1
	[0127.881] CloseHandle (hObject=0x2ec) returned 1
	[0127.883] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40
	[0127.883] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt", nBufferLength=0x40, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt", lpFilePart=0x0) returned 0x3f
	[0127.883] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46
	[0127.883] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt.rogue", nBufferLength=0x46, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt.rogue", lpFilePart=0x0) returned 0x45
	[0127.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0127.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\mw7fmzgh73aar_8tc.odt"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bce35d0, ftCreationTime.dwHighDateTime=0x1d5eb3c, ftLastAccessTime.dwLowDateTime=0x6f59f00, ftLastAccessTime.dwHighDateTime=0x1d5f083, ftLastWriteTime.dwLowDateTime=0xad7bec60, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x7ac0)) returned 1
	[0127.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0127.883] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\mw7fmzgh73aar_8tc.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\1p61Pe3tAWVYhMz\\Mw7FMZgh73aaR_8Tc.odt.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\1p61pe3tawvyhmz\\mw7fmzgh73aar_8tc.odt.rogue")) returned 1
	[0127.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0127.884] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0127.884] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx", lpFilePart=0x0) returned 0x23
	[0127.884] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c927b0, ftCreationTime.dwHighDateTime=0x1d5eb32, ftLastAccessTime.dwLowDateTime=0xbb9485c0, ftLastAccessTime.dwHighDateTime=0x1d5e27d, ftLastWriteTime.dwLowDateTime=0xbb9485c0, ftLastWriteTime.dwHighDateTime=0x1d5e27d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6168
	[0127.885] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c927b0, ftCreationTime.dwHighDateTime=0x1d5eb32, ftLastAccessTime.dwLowDateTime=0xbb9485c0, ftLastAccessTime.dwHighDateTime=0x1d5e27d, ftLastWriteTime.dwLowDateTime=0xbb9485c0, ftLastWriteTime.dwHighDateTime=0x1d5e27d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0127.885] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37c04b0, ftCreationTime.dwHighDateTime=0x1d5ed2b, ftLastAccessTime.dwLowDateTime=0x71d79cf0, ftLastAccessTime.dwHighDateTime=0x1d5ee5e, ftLastWriteTime.dwLowDateTime=0x71d79cf0, ftLastWriteTime.dwHighDateTime=0x1d5ee5e, nFileSizeHigh=0x0, nFileSizeLow=0xe544, dwReserved0=0x0, dwReserved1=0x0, cFileName="4mAiG N.odp", cAlternateFileName="4MAIGN~1.ODP")) returned 1
	[0127.885] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f69c80, ftCreationTime.dwHighDateTime=0x1d5e48a, ftLastAccessTime.dwLowDateTime=0xc638d3b0, ftLastAccessTime.dwHighDateTime=0x1d5edee, ftLastWriteTime.dwLowDateTime=0xc638d3b0, ftLastWriteTime.dwHighDateTime=0x1d5edee, nFileSizeHigh=0x0, nFileSizeLow=0xcb09, dwReserved0=0x0, dwReserved1=0x0, cFileName="bzb6AYkxwSbsWA.xls", cAlternateFileName="BZB6AY~1.XLS")) returned 1
	[0127.885] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dafdbd0, ftCreationTime.dwHighDateTime=0x1d5e883, ftLastAccessTime.dwLowDateTime=0xa045b490, ftLastAccessTime.dwHighDateTime=0x1d5e1e9, ftLastWriteTime.dwLowDateTime=0xa045b490, ftLastWriteTime.dwHighDateTime=0x1d5e1e9, nFileSizeHigh=0x0, nFileSizeLow=0xc2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="d8w-eR33p-TAK_.ods", cAlternateFileName="D8W-ER~1.ODS")) returned 1
	[0127.886] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688da1c0, ftCreationTime.dwHighDateTime=0x1d5e9e6, ftLastAccessTime.dwLowDateTime=0x41a2aaa0, ftLastAccessTime.dwHighDateTime=0x1d5e951, ftLastWriteTime.dwLowDateTime=0x41a2aaa0, ftLastWriteTime.dwHighDateTime=0x1d5e951, nFileSizeHigh=0x0, nFileSizeLow=0x8c5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfuVGAoyx.rtf", cAlternateFileName="DFUVGA~1.RTF")) returned 1
	[0127.886] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a49dcc0, ftCreationTime.dwHighDateTime=0x1d5eff1, ftLastAccessTime.dwLowDateTime=0xbd30f090, ftLastAccessTime.dwHighDateTime=0x1d5e934, ftLastWriteTime.dwLowDateTime=0xbd30f090, ftLastWriteTime.dwHighDateTime=0x1d5e934, nFileSizeHigh=0x0, nFileSizeLow=0x10dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="GYv-PsWQm.xlsx", cAlternateFileName="GYV-PS~1.XLS")) returned 1
	[0127.886] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1236cef0, ftCreationTime.dwHighDateTime=0x1d5eb3a, ftLastAccessTime.dwLowDateTime=0x84f5d130, ftLastAccessTime.dwHighDateTime=0x1d5e814, ftLastWriteTime.dwLowDateTime=0x84f5d130, ftLastWriteTime.dwHighDateTime=0x1d5e814, nFileSizeHigh=0x0, nFileSizeLow=0x132aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="OuvE_334GVn6aA2lr.odt", cAlternateFileName="OUVE_3~1.ODT")) returned 1
	[0127.887] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71bf610, ftCreationTime.dwHighDateTime=0x1d5e1b9, ftLastAccessTime.dwLowDateTime=0x8a2d03e0, ftLastAccessTime.dwHighDateTime=0x1d5ec37, ftLastWriteTime.dwLowDateTime=0x8a2d03e0, ftLastWriteTime.dwHighDateTime=0x1d5ec37, nFileSizeHigh=0x0, nFileSizeLow=0x10a79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q_u_FZxS3yd_5k.ots", cAlternateFileName="Q_U_FZ~1.OTS")) returned 1
	[0127.887] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a83fec0, ftCreationTime.dwHighDateTime=0x1d5ed62, ftLastAccessTime.dwLowDateTime=0x5096f9b0, ftLastAccessTime.dwHighDateTime=0x1d5eb6a, ftLastWriteTime.dwLowDateTime=0x5096f9b0, ftLastWriteTime.dwHighDateTime=0x1d5eb6a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vjaV0pWpthQP9T", cAlternateFileName="VJAV0P~1")) returned 1
	[0127.887] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f247f0, ftCreationTime.dwHighDateTime=0x1d5e9bc, ftLastAccessTime.dwLowDateTime=0x47c19c50, ftLastAccessTime.dwHighDateTime=0x1d5ef84, ftLastWriteTime.dwLowDateTime=0x47c19c50, ftLastWriteTime.dwHighDateTime=0x1d5ef84, nFileSizeHigh=0x0, nFileSizeLow=0x15529, dwReserved0=0x0, dwReserved1=0x0, cFileName="y SGpZu1 UgklvBW80D6.xlsx", cAlternateFileName="YSGPZU~1.XLS")) returned 1
	[0127.887] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0127.887] FindClose (in: hFindFile=0xdd6168 | out: hFindFile=0xdd6168) returned 1
	[0127.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0127.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0127.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0127.888] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0127.888] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx", lpFilePart=0x0) returned 0x23
	[0127.888] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c927b0, ftCreationTime.dwHighDateTime=0x1d5eb32, ftLastAccessTime.dwLowDateTime=0xbb9485c0, ftLastAccessTime.dwHighDateTime=0x1d5e27d, ftLastWriteTime.dwLowDateTime=0xbb9485c0, ftLastWriteTime.dwHighDateTime=0x1d5e27d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd60e8
	[0127.888] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c927b0, ftCreationTime.dwHighDateTime=0x1d5eb32, ftLastAccessTime.dwLowDateTime=0xbb9485c0, ftLastAccessTime.dwHighDateTime=0x1d5e27d, ftLastWriteTime.dwLowDateTime=0xbb9485c0, ftLastWriteTime.dwHighDateTime=0x1d5e27d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0127.888] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37c04b0, ftCreationTime.dwHighDateTime=0x1d5ed2b, ftLastAccessTime.dwLowDateTime=0x71d79cf0, ftLastAccessTime.dwHighDateTime=0x1d5ee5e, ftLastWriteTime.dwLowDateTime=0x71d79cf0, ftLastWriteTime.dwHighDateTime=0x1d5ee5e, nFileSizeHigh=0x0, nFileSizeLow=0xe544, dwReserved0=0x0, dwReserved1=0x0, cFileName="4mAiG N.odp", cAlternateFileName="4MAIGN~1.ODP")) returned 1
	[0127.889] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f69c80, ftCreationTime.dwHighDateTime=0x1d5e48a, ftLastAccessTime.dwLowDateTime=0xc638d3b0, ftLastAccessTime.dwHighDateTime=0x1d5edee, ftLastWriteTime.dwLowDateTime=0xc638d3b0, ftLastWriteTime.dwHighDateTime=0x1d5edee, nFileSizeHigh=0x0, nFileSizeLow=0xcb09, dwReserved0=0x0, dwReserved1=0x0, cFileName="bzb6AYkxwSbsWA.xls", cAlternateFileName="BZB6AY~1.XLS")) returned 1
	[0127.889] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dafdbd0, ftCreationTime.dwHighDateTime=0x1d5e883, ftLastAccessTime.dwLowDateTime=0xa045b490, ftLastAccessTime.dwHighDateTime=0x1d5e1e9, ftLastWriteTime.dwLowDateTime=0xa045b490, ftLastWriteTime.dwHighDateTime=0x1d5e1e9, nFileSizeHigh=0x0, nFileSizeLow=0xc2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="d8w-eR33p-TAK_.ods", cAlternateFileName="D8W-ER~1.ODS")) returned 1
	[0127.889] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688da1c0, ftCreationTime.dwHighDateTime=0x1d5e9e6, ftLastAccessTime.dwLowDateTime=0x41a2aaa0, ftLastAccessTime.dwHighDateTime=0x1d5e951, ftLastWriteTime.dwLowDateTime=0x41a2aaa0, ftLastWriteTime.dwHighDateTime=0x1d5e951, nFileSizeHigh=0x0, nFileSizeLow=0x8c5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfuVGAoyx.rtf", cAlternateFileName="DFUVGA~1.RTF")) returned 1
	[0127.889] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a49dcc0, ftCreationTime.dwHighDateTime=0x1d5eff1, ftLastAccessTime.dwLowDateTime=0xbd30f090, ftLastAccessTime.dwHighDateTime=0x1d5e934, ftLastWriteTime.dwLowDateTime=0xbd30f090, ftLastWriteTime.dwHighDateTime=0x1d5e934, nFileSizeHigh=0x0, nFileSizeLow=0x10dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="GYv-PsWQm.xlsx", cAlternateFileName="GYV-PS~1.XLS")) returned 1
	[0127.890] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1236cef0, ftCreationTime.dwHighDateTime=0x1d5eb3a, ftLastAccessTime.dwLowDateTime=0x84f5d130, ftLastAccessTime.dwHighDateTime=0x1d5e814, ftLastWriteTime.dwLowDateTime=0x84f5d130, ftLastWriteTime.dwHighDateTime=0x1d5e814, nFileSizeHigh=0x0, nFileSizeLow=0x132aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="OuvE_334GVn6aA2lr.odt", cAlternateFileName="OUVE_3~1.ODT")) returned 1
	[0127.890] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71bf610, ftCreationTime.dwHighDateTime=0x1d5e1b9, ftLastAccessTime.dwLowDateTime=0x8a2d03e0, ftLastAccessTime.dwHighDateTime=0x1d5ec37, ftLastWriteTime.dwLowDateTime=0x8a2d03e0, ftLastWriteTime.dwHighDateTime=0x1d5ec37, nFileSizeHigh=0x0, nFileSizeLow=0x10a79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q_u_FZxS3yd_5k.ots", cAlternateFileName="Q_U_FZ~1.OTS")) returned 1
	[0127.890] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a83fec0, ftCreationTime.dwHighDateTime=0x1d5ed62, ftLastAccessTime.dwLowDateTime=0x5096f9b0, ftLastAccessTime.dwHighDateTime=0x1d5eb6a, ftLastWriteTime.dwLowDateTime=0x5096f9b0, ftLastWriteTime.dwHighDateTime=0x1d5eb6a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vjaV0pWpthQP9T", cAlternateFileName="VJAV0P~1")) returned 1
	[0127.890] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f247f0, ftCreationTime.dwHighDateTime=0x1d5e9bc, ftLastAccessTime.dwLowDateTime=0x47c19c50, ftLastAccessTime.dwHighDateTime=0x1d5ef84, ftLastWriteTime.dwLowDateTime=0x47c19c50, ftLastWriteTime.dwHighDateTime=0x1d5ef84, nFileSizeHigh=0x0, nFileSizeLow=0x15529, dwReserved0=0x0, dwReserved1=0x0, cFileName="y SGpZu1 UgklvBW80D6.xlsx", cAlternateFileName="YSGPZU~1.XLS")) returned 1
	[0127.890] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f247f0, ftCreationTime.dwHighDateTime=0x1d5e9bc, ftLastAccessTime.dwLowDateTime=0x47c19c50, ftLastAccessTime.dwHighDateTime=0x1d5ef84, ftLastWriteTime.dwLowDateTime=0x47c19c50, ftLastWriteTime.dwHighDateTime=0x1d5ef84, nFileSizeHigh=0x0, nFileSizeLow=0x15529, dwReserved0=0x0, dwReserved1=0x0, cFileName="y SGpZu1 UgklvBW80D6.xlsx", cAlternateFileName="YSGPZU~1.XLS")) returned 0
	[0127.891] FindClose (in: hFindFile=0xdd60e8 | out: hFindFile=0xdd60e8) returned 1
	[0127.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0127.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0127.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37
	[0127.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls", nBufferLength=0x37, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls", lpFilePart=0x0) returned 0x36
	[0127.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0127.891] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\bzb6aykxwsbswa.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.891] GetFileType (hFile=0x2ec) returned 0x1
	[0127.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0127.891] GetFileType (hFile=0x2ec) returned 0x1
	[0127.891] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0xcb09
	[0127.892] ReadFile (in: hFile=0x2ec, lpBuffer=0x2b2676c, nNumberOfBytesToRead=0xcb09, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2b2676c*, lpNumberOfBytesRead=0xafe928*=0xcb09, lpOverlapped=0x0) returned 1
	[0127.893] CloseHandle (hObject=0x2ec) returned 1
	[0127.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0127.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0127.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0127.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0127.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37
	[0127.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls", nBufferLength=0x37, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls", lpFilePart=0x0) returned 0x36
	[0127.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0127.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\bzb6aykxwsbswa.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.980] GetFileType (hFile=0x2ec) returned 0x1
	[0127.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0127.980] GetFileType (hFile=0x2ec) returned 0x1
	[0127.980] WriteFile (in: hFile=0x2ec, lpBuffer=0x2993b70*, nNumberOfBytesToWrite=0xcb10, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2993b70*, lpNumberOfBytesWritten=0xafe91c*=0xcb10, lpOverlapped=0x0) returned 1
	[0127.982] CloseHandle (hObject=0x2ec) returned 1
	[0127.985] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37
	[0127.985] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls", nBufferLength=0x37, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls", lpFilePart=0x0) returned 0x36
	[0127.985] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d
	[0127.985] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls.rogue", nBufferLength=0x3d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls.rogue", lpFilePart=0x0) returned 0x3c
	[0127.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0127.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\bzb6aykxwsbswa.xls"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f69c80, ftCreationTime.dwHighDateTime=0x1d5e48a, ftLastAccessTime.dwLowDateTime=0xc638d3b0, ftLastAccessTime.dwHighDateTime=0x1d5edee, ftLastWriteTime.dwLowDateTime=0xad8ca138, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xcb10)) returned 1
	[0127.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0127.986] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\bzb6aykxwsbswa.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\bzb6AYkxwSbsWA.xls.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\bzb6aykxwsbswa.xls.rogue")) returned 1
	[0127.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0127.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf", lpFilePart=0x0) returned 0x31
	[0127.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0127.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\dfuvgaoyx.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0127.987] GetFileType (hFile=0x2ec) returned 0x1
	[0127.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0127.987] GetFileType (hFile=0x2ec) returned 0x1
	[0127.987] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x8c5a
	[0127.988] ReadFile (in: hFile=0x2ec, lpBuffer=0x29a0918, nNumberOfBytesToRead=0x8c5a, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x29a0918*, lpNumberOfBytesRead=0xafe928*=0x8c5a, lpOverlapped=0x0) returned 1
	[0127.989] CloseHandle (hObject=0x2ec) returned 1
	[0128.017] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.017] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0128.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0128.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0128.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf", lpFilePart=0x0) returned 0x31
	[0128.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0128.018] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\dfuvgaoyx.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.019] GetFileType (hFile=0x2ec) returned 0x1
	[0128.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0128.019] GetFileType (hFile=0x2ec) returned 0x1
	[0128.019] WriteFile (in: hFile=0x2ec, lpBuffer=0x2a19640*, nNumberOfBytesToWrite=0x8c60, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2a19640*, lpNumberOfBytesWritten=0xafe91c*=0x8c60, lpOverlapped=0x0) returned 1
	[0128.026] CloseHandle (hObject=0x2ec) returned 1
	[0128.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0128.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf", lpFilePart=0x0) returned 0x31
	[0128.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38
	[0128.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf.rogue", nBufferLength=0x38, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf.rogue", lpFilePart=0x0) returned 0x37
	[0128.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0128.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\dfuvgaoyx.rtf"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688da1c0, ftCreationTime.dwHighDateTime=0x1d5e9e6, ftLastAccessTime.dwLowDateTime=0x41a2aaa0, ftLastAccessTime.dwHighDateTime=0x1d5e951, ftLastWriteTime.dwLowDateTime=0xad93c3cf, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x8c60)) returned 1
	[0128.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0128.031] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\dfuvgaoyx.rtf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\dfuVGAoyx.rtf.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\dfuvgaoyx.rtf.rogue")) returned 1
	[0128.031] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33
	[0128.031] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx", nBufferLength=0x33, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx", lpFilePart=0x0) returned 0x32
	[0128.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.032] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\gyv-pswqm.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.032] GetFileType (hFile=0x2ec) returned 0x1
	[0128.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.032] GetFileType (hFile=0x2ec) returned 0x1
	[0128.032] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x10dfa
	[0128.032] ReadFile (in: hFile=0x2ec, lpBuffer=0x2a2250c, nNumberOfBytesToRead=0x10dfa, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2a2250c*, lpNumberOfBytesRead=0xafe928*=0x10dfa, lpOverlapped=0x0) returned 1
	[0128.034] CloseHandle (hObject=0x2ec) returned 1
	[0128.065] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.065] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0128.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0128.066] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33
	[0128.066] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx", nBufferLength=0x33, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx", lpFilePart=0x0) returned 0x32
	[0128.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0128.066] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\gyv-pswqm.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.068] GetFileType (hFile=0x2ec) returned 0x1
	[0128.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0128.068] GetFileType (hFile=0x2ec) returned 0x1
	[0128.068] WriteFile (in: hFile=0x2ec, lpBuffer=0x2aa1d0c*, nNumberOfBytesToWrite=0x10e00, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2aa1d0c*, lpNumberOfBytesWritten=0xafe91c*=0x10e00, lpOverlapped=0x0) returned 1
	[0128.070] CloseHandle (hObject=0x2ec) returned 1
	[0128.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33
	[0128.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx", nBufferLength=0x33, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx", lpFilePart=0x0) returned 0x32
	[0128.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39
	[0128.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx.rogue", nBufferLength=0x39, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx.rogue", lpFilePart=0x0) returned 0x38
	[0128.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0128.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\gyv-pswqm.xlsx"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a49dcc0, ftCreationTime.dwHighDateTime=0x1d5eff1, ftLastAccessTime.dwLowDateTime=0xbd30f090, ftLastAccessTime.dwHighDateTime=0x1d5e934, ftLastWriteTime.dwLowDateTime=0xad98886d, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x10e00)) returned 1
	[0128.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0128.074] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\gyv-pswqm.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\GYv-PsWQm.xlsx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\gyv-pswqm.xlsx.rogue")) returned 1
	[0128.075] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0128.075] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt", lpFilePart=0x0) returned 0x39
	[0128.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.075] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\ouve_334gvn6aa2lr.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.076] GetFileType (hFile=0x2ec) returned 0x1
	[0128.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.076] GetFileType (hFile=0x2ec) returned 0x1
	[0128.076] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x132aa
	[0128.076] ReadFile (in: hFile=0x2ec, lpBuffer=0x2ab2d8c, nNumberOfBytesToRead=0x132aa, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2ab2d8c*, lpNumberOfBytesRead=0xafe928*=0x132aa, lpOverlapped=0x0) returned 1
	[0128.078] CloseHandle (hObject=0x2ec) returned 1
	[0128.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0128.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0128.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0128.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt", lpFilePart=0x0) returned 0x39
	[0128.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0128.125] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\ouve_334gvn6aa2lr.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.127] GetFileType (hFile=0x2ec) returned 0x1
	[0128.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0128.127] GetFileType (hFile=0x2ec) returned 0x1
	[0128.127] WriteFile (in: hFile=0x2ec, lpBuffer=0x2b3939c*, nNumberOfBytesToWrite=0x132b0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2b3939c*, lpNumberOfBytesWritten=0xafe91c*=0x132b0, lpOverlapped=0x0) returned 1
	[0128.130] CloseHandle (hObject=0x2ec) returned 1
	[0128.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0128.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt", lpFilePart=0x0) returned 0x39
	[0128.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40
	[0128.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt.rogue", nBufferLength=0x40, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt.rogue", lpFilePart=0x0) returned 0x3f
	[0128.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0128.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\ouve_334gvn6aa2lr.odt"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1236cef0, ftCreationTime.dwHighDateTime=0x1d5eb3a, ftLastAccessTime.dwLowDateTime=0x84f5d130, ftLastAccessTime.dwHighDateTime=0x1d5e814, ftLastWriteTime.dwLowDateTime=0xada2122d, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x132b0)) returned 1
	[0128.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0128.134] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\ouve_334gvn6aa2lr.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\OuvE_334GVn6aA2lr.odt.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\ouve_334gvn6aa2lr.odt.rogue")) returned 1
	[0128.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e
	[0128.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx", nBufferLength=0x3e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx", lpFilePart=0x0) returned 0x3d
	[0128.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.135] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\y sgpzu1 ugklvbw80d6.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.135] GetFileType (hFile=0x2ec) returned 0x1
	[0128.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.135] GetFileType (hFile=0x2ec) returned 0x1
	[0128.135] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x15529
	[0128.193] ReadFile (in: hFile=0x2ec, lpBuffer=0x38d94c8, nNumberOfBytesToRead=0x15529, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x38d94c8*, lpNumberOfBytesRead=0xafe928*=0x15529, lpOverlapped=0x0) returned 1
	[0128.194] CloseHandle (hObject=0x2ec) returned 1
	[0128.313] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.313] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0128.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0128.314] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e
	[0128.314] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx", nBufferLength=0x3e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx", lpFilePart=0x0) returned 0x3d
	[0128.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0128.314] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\y sgpzu1 ugklvbw80d6.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.316] GetFileType (hFile=0x2ec) returned 0x1
	[0128.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0128.316] GetFileType (hFile=0x2ec) returned 0x1
	[0128.316] WriteFile (in: hFile=0x2ec, lpBuffer=0x3972eb0*, nNumberOfBytesToWrite=0x15530, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x3972eb0*, lpNumberOfBytesWritten=0xafe91c*=0x15530, lpOverlapped=0x0) returned 1
	[0128.318] CloseHandle (hObject=0x2ec) returned 1
	[0128.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e
	[0128.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx", nBufferLength=0x3e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx", lpFilePart=0x0) returned 0x3d
	[0128.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44
	[0128.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx.rogue", nBufferLength=0x44, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx.rogue", lpFilePart=0x0) returned 0x43
	[0128.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0128.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\y sgpzu1 ugklvbw80d6.xlsx"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f247f0, ftCreationTime.dwHighDateTime=0x1d5e9bc, ftLastAccessTime.dwLowDateTime=0x47c19c50, ftLastAccessTime.dwHighDateTime=0x1d5ef84, ftLastWriteTime.dwLowDateTime=0xadbe6b3e, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x15530)) returned 1
	[0128.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0128.321] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\y sgpzu1 ugklvbw80d6.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\y SGpZu1 UgklvBW80D6.xlsx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\y sgpzu1 ugklvbw80d6.xlsx.rogue")) returned 1
	[0128.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0128.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33
	[0128.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T", nBufferLength=0x33, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T", lpFilePart=0x0) returned 0x32
	[0128.323] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a83fec0, ftCreationTime.dwHighDateTime=0x1d5ed62, ftLastAccessTime.dwLowDateTime=0x5096f9b0, ftLastAccessTime.dwHighDateTime=0x1d5eb6a, ftLastWriteTime.dwLowDateTime=0x5096f9b0, ftLastWriteTime.dwHighDateTime=0x1d5eb6a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d6c0
	[0128.323] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a83fec0, ftCreationTime.dwHighDateTime=0x1d5ed62, ftLastAccessTime.dwLowDateTime=0x5096f9b0, ftLastAccessTime.dwHighDateTime=0x1d5eb6a, ftLastWriteTime.dwLowDateTime=0x5096f9b0, ftLastWriteTime.dwHighDateTime=0x1d5eb6a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.323] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a96d0f0, ftCreationTime.dwHighDateTime=0x1d5e294, ftLastAccessTime.dwLowDateTime=0x3c337940, ftLastAccessTime.dwHighDateTime=0x1d5e213, ftLastWriteTime.dwLowDateTime=0x3c337940, ftLastWriteTime.dwHighDateTime=0x1d5e213, nFileSizeHigh=0x0, nFileSizeLow=0x5b76, dwReserved0=0x0, dwReserved1=0x0, cFileName="6Za8UX.ppt", cAlternateFileName="")) returned 1
	[0128.323] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9484910, ftCreationTime.dwHighDateTime=0x1d5e274, ftLastAccessTime.dwLowDateTime=0x649e120, ftLastAccessTime.dwHighDateTime=0x1d5f0f0, ftLastWriteTime.dwLowDateTime=0x649e120, ftLastWriteTime.dwHighDateTime=0x1d5f0f0, nFileSizeHigh=0x0, nFileSizeLow=0x4bdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="D-_8S2-Np3r5LIXNgrd.odt", cAlternateFileName="D-_8S2~1.ODT")) returned 1
	[0128.324] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1d652e0, ftCreationTime.dwHighDateTime=0x1d5eab2, ftLastAccessTime.dwLowDateTime=0x910e6990, ftLastAccessTime.dwHighDateTime=0x1d5efa9, ftLastWriteTime.dwLowDateTime=0x910e6990, ftLastWriteTime.dwHighDateTime=0x1d5efa9, nFileSizeHigh=0x0, nFileSizeLow=0x2142, dwReserved0=0x0, dwReserved1=0x0, cFileName="HA HEZr0r.xls", cAlternateFileName="HAHEZR~1.XLS")) returned 1
	[0128.324] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382f4100, ftCreationTime.dwHighDateTime=0x1d5e211, ftLastAccessTime.dwLowDateTime=0x9129d3a0, ftLastAccessTime.dwHighDateTime=0x1d5e16d, ftLastWriteTime.dwLowDateTime=0x9129d3a0, ftLastWriteTime.dwHighDateTime=0x1d5e16d, nFileSizeHigh=0x0, nFileSizeLow=0x11d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="piAjDZM8J.docx", cAlternateFileName="PIAJDZ~1.DOC")) returned 1
	[0128.324] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a999520, ftCreationTime.dwHighDateTime=0x1d5ed0b, ftLastAccessTime.dwLowDateTime=0x11d4e4d0, ftLastAccessTime.dwHighDateTime=0x1d5e0f2, ftLastWriteTime.dwLowDateTime=0x11d4e4d0, ftLastWriteTime.dwHighDateTime=0x1d5e0f2, nFileSizeHigh=0x0, nFileSizeLow=0x1877d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rf8FB2.pptx", cAlternateFileName="RF8FB2~1.PPT")) returned 1
	[0128.324] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a74f370, ftCreationTime.dwHighDateTime=0x1d5e49d, ftLastAccessTime.dwLowDateTime=0xc257fe50, ftLastAccessTime.dwHighDateTime=0x1d5f0d3, ftLastWriteTime.dwLowDateTime=0xc257fe50, ftLastWriteTime.dwHighDateTime=0x1d5f0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcefe, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2gnScOd0.docx", cAlternateFileName="W2GNSC~1.DOC")) returned 1
	[0128.324] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35e26820, ftCreationTime.dwHighDateTime=0x1d5ed04, ftLastAccessTime.dwLowDateTime=0x59154800, ftLastAccessTime.dwHighDateTime=0x1d5e640, ftLastWriteTime.dwLowDateTime=0x59154800, ftLastWriteTime.dwHighDateTime=0x1d5e640, nFileSizeHigh=0x0, nFileSizeLow=0xc2f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="wGsWPvvEHksb4K.pdf", cAlternateFileName="WGSWPV~1.PDF")) returned 1
	[0128.324] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa13c7920, ftCreationTime.dwHighDateTime=0x1d5e2c4, ftLastAccessTime.dwLowDateTime=0xe07bc5e0, ftLastAccessTime.dwHighDateTime=0x1d5ee50, ftLastWriteTime.dwLowDateTime=0xe07bc5e0, ftLastWriteTime.dwHighDateTime=0x1d5ee50, nFileSizeHigh=0x0, nFileSizeLow=0xa13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="XdJ0y4Fqsjowe6f.csv", cAlternateFileName="XDJ0Y4~1.CSV")) returned 1
	[0128.325] FindNextFileW (in: hFindFile=0xd9d6c0, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.325] FindClose (in: hFindFile=0xd9d6c0 | out: hFindFile=0xd9d6c0) returned 1
	[0128.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0128.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0128.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0128.325] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33
	[0128.325] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T", nBufferLength=0x33, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T", lpFilePart=0x0) returned 0x32
	[0128.325] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a83fec0, ftCreationTime.dwHighDateTime=0x1d5ed62, ftLastAccessTime.dwLowDateTime=0x5096f9b0, ftLastAccessTime.dwHighDateTime=0x1d5eb6a, ftLastWriteTime.dwLowDateTime=0x5096f9b0, ftLastWriteTime.dwHighDateTime=0x1d5eb6a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d200
	[0128.326] FindNextFileW (in: hFindFile=0xd9d200, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a83fec0, ftCreationTime.dwHighDateTime=0x1d5ed62, ftLastAccessTime.dwLowDateTime=0x5096f9b0, ftLastAccessTime.dwHighDateTime=0x1d5eb6a, ftLastWriteTime.dwLowDateTime=0x5096f9b0, ftLastWriteTime.dwHighDateTime=0x1d5eb6a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.326] FindNextFileW (in: hFindFile=0xd9d200, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a96d0f0, ftCreationTime.dwHighDateTime=0x1d5e294, ftLastAccessTime.dwLowDateTime=0x3c337940, ftLastAccessTime.dwHighDateTime=0x1d5e213, ftLastWriteTime.dwLowDateTime=0x3c337940, ftLastWriteTime.dwHighDateTime=0x1d5e213, nFileSizeHigh=0x0, nFileSizeLow=0x5b76, dwReserved0=0x0, dwReserved1=0x0, cFileName="6Za8UX.ppt", cAlternateFileName="")) returned 1
	[0128.326] FindNextFileW (in: hFindFile=0xd9d200, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9484910, ftCreationTime.dwHighDateTime=0x1d5e274, ftLastAccessTime.dwLowDateTime=0x649e120, ftLastAccessTime.dwHighDateTime=0x1d5f0f0, ftLastWriteTime.dwLowDateTime=0x649e120, ftLastWriteTime.dwHighDateTime=0x1d5f0f0, nFileSizeHigh=0x0, nFileSizeLow=0x4bdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="D-_8S2-Np3r5LIXNgrd.odt", cAlternateFileName="D-_8S2~1.ODT")) returned 1
	[0128.326] FindNextFileW (in: hFindFile=0xd9d200, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1d652e0, ftCreationTime.dwHighDateTime=0x1d5eab2, ftLastAccessTime.dwLowDateTime=0x910e6990, ftLastAccessTime.dwHighDateTime=0x1d5efa9, ftLastWriteTime.dwLowDateTime=0x910e6990, ftLastWriteTime.dwHighDateTime=0x1d5efa9, nFileSizeHigh=0x0, nFileSizeLow=0x2142, dwReserved0=0x0, dwReserved1=0x0, cFileName="HA HEZr0r.xls", cAlternateFileName="HAHEZR~1.XLS")) returned 1
	[0128.327] FindNextFileW (in: hFindFile=0xd9d200, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382f4100, ftCreationTime.dwHighDateTime=0x1d5e211, ftLastAccessTime.dwLowDateTime=0x9129d3a0, ftLastAccessTime.dwHighDateTime=0x1d5e16d, ftLastWriteTime.dwLowDateTime=0x9129d3a0, ftLastWriteTime.dwHighDateTime=0x1d5e16d, nFileSizeHigh=0x0, nFileSizeLow=0x11d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="piAjDZM8J.docx", cAlternateFileName="PIAJDZ~1.DOC")) returned 1
	[0128.327] FindNextFileW (in: hFindFile=0xd9d200, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a999520, ftCreationTime.dwHighDateTime=0x1d5ed0b, ftLastAccessTime.dwLowDateTime=0x11d4e4d0, ftLastAccessTime.dwHighDateTime=0x1d5e0f2, ftLastWriteTime.dwLowDateTime=0x11d4e4d0, ftLastWriteTime.dwHighDateTime=0x1d5e0f2, nFileSizeHigh=0x0, nFileSizeLow=0x1877d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rf8FB2.pptx", cAlternateFileName="RF8FB2~1.PPT")) returned 1
	[0128.327] FindNextFileW (in: hFindFile=0xd9d200, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a74f370, ftCreationTime.dwHighDateTime=0x1d5e49d, ftLastAccessTime.dwLowDateTime=0xc257fe50, ftLastAccessTime.dwHighDateTime=0x1d5f0d3, ftLastWriteTime.dwLowDateTime=0xc257fe50, ftLastWriteTime.dwHighDateTime=0x1d5f0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcefe, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2gnScOd0.docx", cAlternateFileName="W2GNSC~1.DOC")) returned 1
	[0128.327] FindNextFileW (in: hFindFile=0xd9d200, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35e26820, ftCreationTime.dwHighDateTime=0x1d5ed04, ftLastAccessTime.dwLowDateTime=0x59154800, ftLastAccessTime.dwHighDateTime=0x1d5e640, ftLastWriteTime.dwLowDateTime=0x59154800, ftLastWriteTime.dwHighDateTime=0x1d5e640, nFileSizeHigh=0x0, nFileSizeLow=0xc2f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="wGsWPvvEHksb4K.pdf", cAlternateFileName="WGSWPV~1.PDF")) returned 1
	[0128.328] FindNextFileW (in: hFindFile=0xd9d200, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa13c7920, ftCreationTime.dwHighDateTime=0x1d5e2c4, ftLastAccessTime.dwLowDateTime=0xe07bc5e0, ftLastAccessTime.dwHighDateTime=0x1d5ee50, ftLastWriteTime.dwLowDateTime=0xe07bc5e0, ftLastWriteTime.dwHighDateTime=0x1d5ee50, nFileSizeHigh=0x0, nFileSizeLow=0xa13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="XdJ0y4Fqsjowe6f.csv", cAlternateFileName="XDJ0Y4~1.CSV")) returned 1
	[0128.328] FindNextFileW (in: hFindFile=0xd9d200, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa13c7920, ftCreationTime.dwHighDateTime=0x1d5e2c4, ftLastAccessTime.dwLowDateTime=0xe07bc5e0, ftLastAccessTime.dwHighDateTime=0x1d5ee50, ftLastWriteTime.dwLowDateTime=0xe07bc5e0, ftLastWriteTime.dwHighDateTime=0x1d5ee50, nFileSizeHigh=0x0, nFileSizeLow=0xa13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="XdJ0y4Fqsjowe6f.csv", cAlternateFileName="XDJ0Y4~1.CSV")) returned 0
	[0128.328] FindClose (in: hFindFile=0xd9d200 | out: hFindFile=0xd9d200) returned 1
	[0128.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0128.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0128.328] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e
	[0128.328] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt", nBufferLength=0x3e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt", lpFilePart=0x0) returned 0x3d
	[0128.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0128.329] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\6za8ux.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.329] GetFileType (hFile=0x2ec) returned 0x1
	[0128.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0128.329] GetFileType (hFile=0x2ec) returned 0x1
	[0128.329] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0x5b76
	[0128.329] ReadFile (in: hFile=0x2ec, lpBuffer=0x294b3a4, nNumberOfBytesToRead=0x5b76, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x294b3a4*, lpNumberOfBytesRead=0xafe8b4*=0x5b76, lpOverlapped=0x0) returned 1
	[0128.330] CloseHandle (hObject=0x2ec) returned 1
	[0128.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e
	[0128.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt", nBufferLength=0x3e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt", lpFilePart=0x0) returned 0x3d
	[0128.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0128.356] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\6za8ux.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.358] GetFileType (hFile=0x2ec) returned 0x1
	[0128.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0128.358] GetFileType (hFile=0x2ec) returned 0x1
	[0128.358] WriteFile (in: hFile=0x2ec, lpBuffer=0x29b4b10*, nNumberOfBytesToWrite=0x5b80, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x29b4b10*, lpNumberOfBytesWritten=0xafe8a8*=0x5b80, lpOverlapped=0x0) returned 1
	[0128.359] CloseHandle (hObject=0x2ec) returned 1
	[0128.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e
	[0128.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt", nBufferLength=0x3e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt", lpFilePart=0x0) returned 0x3d
	[0128.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44
	[0128.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt.rogue", nBufferLength=0x44, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt.rogue", lpFilePart=0x0) returned 0x43
	[0128.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0128.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\6za8ux.ppt"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a96d0f0, ftCreationTime.dwHighDateTime=0x1d5e294, ftLastAccessTime.dwLowDateTime=0x3c337940, ftLastAccessTime.dwHighDateTime=0x1d5e213, ftLastWriteTime.dwLowDateTime=0xadc59573, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x5b80)) returned 1
	[0128.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0128.362] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\6za8ux.ppt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\6Za8UX.ppt.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\6za8ux.ppt.rogue")) returned 1
	[0128.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b
	[0128.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt", nBufferLength=0x4b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt", lpFilePart=0x0) returned 0x4a
	[0128.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0128.363] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\d-_8s2-np3r5lixngrd.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.363] GetFileType (hFile=0x2ec) returned 0x1
	[0128.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0128.363] GetFileType (hFile=0x2ec) returned 0x1
	[0128.363] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0x4bdf
	[0128.363] ReadFile (in: hFile=0x2ec, lpBuffer=0x29ba920, nNumberOfBytesToRead=0x4bdf, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x29ba920*, lpNumberOfBytesRead=0xafe8b4*=0x4bdf, lpOverlapped=0x0) returned 1
	[0128.364] CloseHandle (hObject=0x2ec) returned 1
	[0128.382] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.382] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.382] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b
	[0128.382] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt", nBufferLength=0x4b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt", lpFilePart=0x0) returned 0x4a
	[0128.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0128.383] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\d-_8s2-np3r5lixngrd.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.384] GetFileType (hFile=0x2ec) returned 0x1
	[0128.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0128.384] GetFileType (hFile=0x2ec) returned 0x1
	[0128.384] WriteFile (in: hFile=0x2ec, lpBuffer=0x2a1f26c*, nNumberOfBytesToWrite=0x4be0, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x2a1f26c*, lpNumberOfBytesWritten=0xafe8a8*=0x4be0, lpOverlapped=0x0) returned 1
	[0128.387] CloseHandle (hObject=0x2ec) returned 1
	[0128.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b
	[0128.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt", nBufferLength=0x4b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt", lpFilePart=0x0) returned 0x4a
	[0128.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51
	[0128.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt.rogue", nBufferLength=0x51, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt.rogue", lpFilePart=0x0) returned 0x50
	[0128.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0128.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\d-_8s2-np3r5lixngrd.odt"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9484910, ftCreationTime.dwHighDateTime=0x1d5e274, ftLastAccessTime.dwLowDateTime=0x649e120, ftLastAccessTime.dwHighDateTime=0x1d5f0f0, ftLastWriteTime.dwLowDateTime=0xadca5aa5, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x4be0)) returned 1
	[0128.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0128.390] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\d-_8s2-np3r5lixngrd.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\D-_8S2-Np3r5LIXNgrd.odt.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\d-_8s2-np3r5lixngrd.odt.rogue")) returned 1
	[0128.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41
	[0128.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls", nBufferLength=0x41, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls", lpFilePart=0x0) returned 0x40
	[0128.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0128.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\ha hezr0r.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.391] GetFileType (hFile=0x2ec) returned 0x1
	[0128.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0128.391] GetFileType (hFile=0x2ec) returned 0x1
	[0128.391] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0x2142
	[0128.391] ReadFile (in: hFile=0x2ec, lpBuffer=0x2a240fc, nNumberOfBytesToRead=0x2142, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x2a240fc*, lpNumberOfBytesRead=0xafe8b4*=0x2142, lpOverlapped=0x0) returned 1
	[0128.392] CloseHandle (hObject=0x2ec) returned 1
	[0128.417] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.417] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.418] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41
	[0128.418] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls", nBufferLength=0x41, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls", lpFilePart=0x0) returned 0x40
	[0128.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0128.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\ha hezr0r.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.419] GetFileType (hFile=0x2ec) returned 0x1
	[0128.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0128.419] GetFileType (hFile=0x2ec) returned 0x1
	[0128.420] WriteFile (in: hFile=0x2ec, lpBuffer=0x2a7b578*, nNumberOfBytesToWrite=0x2150, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x2a7b578*, lpNumberOfBytesWritten=0xafe8a8*=0x2150, lpOverlapped=0x0) returned 1
	[0128.421] CloseHandle (hObject=0x2ec) returned 1
	[0128.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41
	[0128.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls", nBufferLength=0x41, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls", lpFilePart=0x0) returned 0x40
	[0128.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47
	[0128.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls.rogue", nBufferLength=0x47, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls.rogue", lpFilePart=0x0) returned 0x46
	[0128.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0128.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\ha hezr0r.xls"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1d652e0, ftCreationTime.dwHighDateTime=0x1d5eab2, ftLastAccessTime.dwLowDateTime=0x910e6990, ftLastAccessTime.dwHighDateTime=0x1d5efa9, ftLastWriteTime.dwLowDateTime=0xadcf1e4c, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x2150)) returned 1
	[0128.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0128.423] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\ha hezr0r.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\HA HEZr0r.xls.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\ha hezr0r.xls.rogue")) returned 1
	[0128.423] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42
	[0128.423] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx", nBufferLength=0x42, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx", lpFilePart=0x0) returned 0x41
	[0128.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0128.424] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\piajdzm8j.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.424] GetFileType (hFile=0x2ec) returned 0x1
	[0128.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0128.424] GetFileType (hFile=0x2ec) returned 0x1
	[0128.424] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0x11d7a
	[0128.424] ReadFile (in: hFile=0x2ec, lpBuffer=0x2a7d954, nNumberOfBytesToRead=0x11d7a, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x2a7d954*, lpNumberOfBytesRead=0xafe8b4*=0x11d7a, lpOverlapped=0x0) returned 1
	[0128.426] CloseHandle (hObject=0x2ec) returned 1
	[0128.458] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.459] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.459] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42
	[0128.459] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx", nBufferLength=0x42, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx", lpFilePart=0x0) returned 0x41
	[0128.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0128.459] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\piajdzm8j.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.461] GetFileType (hFile=0x2ec) returned 0x1
	[0128.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0128.461] GetFileType (hFile=0x2ec) returned 0x1
	[0128.461] WriteFile (in: hFile=0x2ec, lpBuffer=0x290e6b4*, nNumberOfBytesToWrite=0x11d80, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x290e6b4*, lpNumberOfBytesWritten=0xafe8a8*=0x11d80, lpOverlapped=0x0) returned 1
	[0128.463] CloseHandle (hObject=0x2ec) returned 1
	[0128.466] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42
	[0128.466] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx", nBufferLength=0x42, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx", lpFilePart=0x0) returned 0x41
	[0128.466] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48
	[0128.466] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx.rogue", nBufferLength=0x48, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx.rogue", lpFilePart=0x0) returned 0x47
	[0128.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0128.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\piajdzm8j.docx"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382f4100, ftCreationTime.dwHighDateTime=0x1d5e211, ftLastAccessTime.dwLowDateTime=0x9129d3a0, ftLastAccessTime.dwHighDateTime=0x1d5e16d, ftLastWriteTime.dwLowDateTime=0xadd646cf, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x11d80)) returned 1
	[0128.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0128.466] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\piajdzm8j.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\piAjDZM8J.docx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\piajdzm8j.docx.rogue")) returned 1
	[0128.467] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0128.467] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx", lpFilePart=0x0) returned 0x3e
	[0128.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0128.467] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\rf8fb2.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.467] GetFileType (hFile=0x2ec) returned 0x1
	[0128.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0128.467] GetFileType (hFile=0x2ec) returned 0x1
	[0128.467] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0x1877d
	[0128.468] ReadFile (in: hFile=0x2ec, lpBuffer=0x39abf00, nNumberOfBytesToRead=0x1877d, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x39abf00*, lpNumberOfBytesRead=0xafe8b4*=0x1877d, lpOverlapped=0x0) returned 1
	[0128.471] CloseHandle (hObject=0x2ec) returned 1
	[0128.552] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.552] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.552] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0128.552] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx", lpFilePart=0x0) returned 0x3e
	[0128.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0128.552] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\rf8fb2.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.554] GetFileType (hFile=0x2ec) returned 0x1
	[0128.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0128.554] GetFileType (hFile=0x2ec) returned 0x1
	[0128.554] WriteFile (in: hFile=0x2ec, lpBuffer=0x3a264c0*, nNumberOfBytesToWrite=0x18780, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x3a264c0*, lpNumberOfBytesWritten=0xafe8a8*=0x18780, lpOverlapped=0x0) returned 1
	[0128.573] CloseHandle (hObject=0x2ec) returned 1
	[0128.576] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0128.576] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx", lpFilePart=0x0) returned 0x3e
	[0128.576] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45
	[0128.576] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx.rogue", nBufferLength=0x45, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx.rogue", lpFilePart=0x0) returned 0x44
	[0128.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0128.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\rf8fb2.pptx"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a999520, ftCreationTime.dwHighDateTime=0x1d5ed0b, ftLastAccessTime.dwLowDateTime=0x11d4e4d0, ftLastAccessTime.dwHighDateTime=0x1d5e0f2, ftLastWriteTime.dwLowDateTime=0xade70201, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x18780)) returned 1
	[0128.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0128.577] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\rf8fb2.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\Rf8FB2.pptx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\rf8fb2.pptx.rogue")) returned 1
	[0128.577] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42
	[0128.577] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx", nBufferLength=0x42, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx", lpFilePart=0x0) returned 0x41
	[0128.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0128.577] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\w2gnscod0.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.578] GetFileType (hFile=0x2ec) returned 0x1
	[0128.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0128.578] GetFileType (hFile=0x2ec) returned 0x1
	[0128.578] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0xcefe
	[0128.578] ReadFile (in: hFile=0x2ec, lpBuffer=0x296d88c, nNumberOfBytesToRead=0xcefe, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x296d88c*, lpNumberOfBytesRead=0xafe8b4*=0xcefe, lpOverlapped=0x0) returned 1
	[0128.579] CloseHandle (hObject=0x2ec) returned 1
	[0128.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42
	[0128.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx", nBufferLength=0x42, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx", lpFilePart=0x0) returned 0x41
	[0128.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0128.620] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\w2gnscod0.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.622] GetFileType (hFile=0x2ec) returned 0x1
	[0128.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0128.622] GetFileType (hFile=0x2ec) returned 0x1
	[0128.622] WriteFile (in: hFile=0x2ec, lpBuffer=0x29e138c*, nNumberOfBytesToWrite=0xcf00, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x29e138c*, lpNumberOfBytesWritten=0xafe8a8*=0xcf00, lpOverlapped=0x0) returned 1
	[0128.624] CloseHandle (hObject=0x2ec) returned 1
	[0128.626] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42
	[0128.626] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx", nBufferLength=0x42, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx", lpFilePart=0x0) returned 0x41
	[0128.626] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48
	[0128.626] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx.rogue", nBufferLength=0x48, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx.rogue", lpFilePart=0x0) returned 0x47
	[0128.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0128.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\w2gnscod0.docx"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a74f370, ftCreationTime.dwHighDateTime=0x1d5e49d, ftLastAccessTime.dwLowDateTime=0xc257fe50, ftLastAccessTime.dwHighDateTime=0x1d5f0d3, ftLastWriteTime.dwLowDateTime=0xadee1e0b, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xcf00)) returned 1
	[0128.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0128.626] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\w2gnscod0.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\w2gnScOd0.docx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\w2gnscod0.docx.rogue")) returned 1
	[0128.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46
	[0128.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf", nBufferLength=0x46, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf", lpFilePart=0x0) returned 0x45
	[0128.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0128.627] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\wgswpvvehksb4k.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.627] GetFileType (hFile=0x2ec) returned 0x1
	[0128.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0128.627] GetFileType (hFile=0x2ec) returned 0x1
	[0128.627] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0xc2f6
	[0128.628] ReadFile (in: hFile=0x2ec, lpBuffer=0x29ee524, nNumberOfBytesToRead=0xc2f6, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x29ee524*, lpNumberOfBytesRead=0xafe8b4*=0xc2f6, lpOverlapped=0x0) returned 1
	[0128.629] CloseHandle (hObject=0x2ec) returned 1
	[0128.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46
	[0128.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf", nBufferLength=0x46, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf", lpFilePart=0x0) returned 0x45
	[0128.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0128.648] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\wgswpvvehksb4k.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.652] GetFileType (hFile=0x2ec) returned 0x1
	[0128.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0128.652] GetFileType (hFile=0x2ec) returned 0x1
	[0128.652] WriteFile (in: hFile=0x2ec, lpBuffer=0x2a5fc24*, nNumberOfBytesToWrite=0xc300, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x2a5fc24*, lpNumberOfBytesWritten=0xafe8a8*=0xc300, lpOverlapped=0x0) returned 1
	[0128.654] CloseHandle (hObject=0x2ec) returned 1
	[0128.656] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46
	[0128.656] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf", nBufferLength=0x46, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf", lpFilePart=0x0) returned 0x45
	[0128.656] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c
	[0128.656] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf.rogue", nBufferLength=0x4c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf.rogue", lpFilePart=0x0) returned 0x4b
	[0128.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0128.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\wgswpvvehksb4k.pdf"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35e26820, ftCreationTime.dwHighDateTime=0x1d5ed04, ftLastAccessTime.dwLowDateTime=0x59154800, ftLastAccessTime.dwHighDateTime=0x1d5e640, ftLastWriteTime.dwLowDateTime=0xadf2e2ba, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xc300)) returned 1
	[0128.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0128.657] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\wgswpvvehksb4k.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\wGsWPvvEHksb4K.pdf.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\wgswpvvehksb4k.pdf.rogue")) returned 1
	[0128.657] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47
	[0128.657] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv", nBufferLength=0x47, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv", lpFilePart=0x0) returned 0x46
	[0128.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0128.657] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\xdj0y4fqsjowe6f.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.657] GetFileType (hFile=0x2ec) returned 0x1
	[0128.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0128.658] GetFileType (hFile=0x2ec) returned 0x1
	[0128.658] GetFileSize (in: hFile=0x2ec, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0xa13e
	[0128.658] ReadFile (in: hFile=0x2ec, lpBuffer=0x2a6c1cc, nNumberOfBytesToRead=0xa13e, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x2a6c1cc*, lpNumberOfBytesRead=0xafe8b4*=0xa13e, lpOverlapped=0x0) returned 1
	[0128.659] CloseHandle (hObject=0x2ec) returned 1
	[0128.680] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.680] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.680] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47
	[0128.680] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv", nBufferLength=0x47, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv", lpFilePart=0x0) returned 0x46
	[0128.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0128.681] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\xdj0y4fqsjowe6f.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec
	[0128.682] GetFileType (hFile=0x2ec) returned 0x1
	[0128.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0128.682] GetFileType (hFile=0x2ec) returned 0x1
	[0128.682] WriteFile (in: hFile=0x2ec, lpBuffer=0x2aeb5f8*, nNumberOfBytesToWrite=0xa140, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x2aeb5f8*, lpNumberOfBytesWritten=0xafe8a8*=0xa140, lpOverlapped=0x0) returned 1
	[0128.685] CloseHandle (hObject=0x2ec) returned 1
	[0128.687] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47
	[0128.687] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv", nBufferLength=0x47, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv", lpFilePart=0x0) returned 0x46
	[0128.687] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d
	[0128.688] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv.rogue", nBufferLength=0x4d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv.rogue", lpFilePart=0x0) returned 0x4c
	[0128.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0128.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\xdj0y4fqsjowe6f.csv"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa13c7920, ftCreationTime.dwHighDateTime=0x1d5e2c4, ftLastAccessTime.dwLowDateTime=0xe07bc5e0, ftLastAccessTime.dwHighDateTime=0x1d5ee50, ftLastWriteTime.dwLowDateTime=0xadf7a71a, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xa140)) returned 1
	[0128.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0128.688] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\xdj0y4fqsjowe6f.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\97TAjlOUx\\vjaV0pWpthQP9T\\XdJ0y4Fqsjowe6f.csv.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\97tajloux\\vjav0pwpthqp9t\\xdj0y4fqsjowe6f.csv.rogue")) returned 1
	[0128.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0128.689] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23
	[0128.689] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music", nBufferLength=0x23, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Music", lpFilePart=0x0) returned 0x22
	[0128.689] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0128.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe998) returned 1
	[0128.732] EtwEventRegister (in: ProviderId=0x2af7d40, EnableCallback=0x4e00636, CallbackContext=0x0, RegHandle=0x2af7d1c | out: RegHandle=0x2af7d1c) returned 0x0
	[0128.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0128.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26
	[0128.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures", nBufferLength=0x26, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25
	[0128.752] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0128.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe998) returned 1
	[0128.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0128.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0128.755] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes", lpFilePart=0x0) returned 0x23
	[0128.755] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d240
	[0128.756] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.756] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0128.756] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1a0f60e, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1a0f60e, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vssx", cAlternateFileName="FAVORI~1.VSS")) returned 1
	[0128.756] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1
	[0128.756] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0
	[0128.756] FindClose (in: hFindFile=0xd9d240 | out: hFindFile=0xd9d240) returned 1
	[0128.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0128.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0128.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0128.757] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0128.757] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes", lpFilePart=0x0) returned 0x23
	[0128.757] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d240
	[0128.757] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.757] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0128.757] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1a0f60e, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1a0f60e, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vssx", cAlternateFileName="FAVORI~1.VSS")) returned 1
	[0128.758] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1
	[0128.758] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.758] FindClose (in: hFindFile=0xd9d240 | out: hFindFile=0xd9d240) returned 1
	[0128.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0128.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0128.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0128.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0128.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x2c
	[0128.758] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d440
	[0128.759] FindNextFileW (in: hFindFile=0xd9d440, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.759] FindNextFileW (in: hFindFile=0xd9d440, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0128.759] FindNextFileW (in: hFindFile=0xd9d440, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.760] FindClose (in: hFindFile=0xd9d440 | out: hFindFile=0xd9d440) returned 1
	[0128.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0128.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0128.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0128.760] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0128.760] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x2c
	[0128.760] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d240
	[0128.760] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.761] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0128.761] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0
	[0128.761] FindClose (in: hFindFile=0xd9d240 | out: hFindFile=0xd9d240) returned 1
	[0128.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0128.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0128.761] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38
	[0128.761] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x38, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x37
	[0128.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0128.761] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0128.761] GetFileType (hFile=0x2d0) returned 0x1
	[0128.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0128.761] GetFileType (hFile=0x2d0) returned 0x1
	[0128.762] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0x74e6
	[0128.762] ReadFile (in: hFile=0x2d0, lpBuffer=0x2afbc28, nNumberOfBytesToRead=0x74e6, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x2afbc28*, lpNumberOfBytesRead=0xafe8b4*=0x74e6, lpOverlapped=0x0) returned 1
	[0128.763] CloseHandle (hObject=0x2d0) returned 1
	[0128.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38
	[0128.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x38, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x37
	[0128.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0128.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0128.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafcb90) returned 1
	[0128.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0128.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0128.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Videos", lpFilePart=0x0) returned 0x23
	[0128.851] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0128.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe998) returned 1
	[0128.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0128.853] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0128.853] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe", lpFilePart=0x0) returned 0x2e
	[0128.853] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc55909e0, ftCreationTime.dwHighDateTime=0x1d5ec60, ftLastAccessTime.dwLowDateTime=0x57eafc60, ftLastAccessTime.dwHighDateTime=0x1d5eb70, ftLastWriteTime.dwLowDateTime=0x57eafc60, ftLastWriteTime.dwHighDateTime=0x1d5eb70, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d640
	[0128.854] FindNextFileW (in: hFindFile=0xd9d640, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc55909e0, ftCreationTime.dwHighDateTime=0x1d5ec60, ftLastAccessTime.dwLowDateTime=0x57eafc60, ftLastAccessTime.dwHighDateTime=0x1d5eb70, ftLastWriteTime.dwLowDateTime=0x57eafc60, ftLastWriteTime.dwHighDateTime=0x1d5eb70, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.854] FindNextFileW (in: hFindFile=0xd9d640, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x221081d0, ftCreationTime.dwHighDateTime=0x1d5ee4c, ftLastAccessTime.dwLowDateTime=0x3bc059c0, ftLastAccessTime.dwHighDateTime=0x1d5ec53, ftLastWriteTime.dwLowDateTime=0x3bc059c0, ftLastWriteTime.dwHighDateTime=0x1d5ec53, nFileSizeHigh=0x0, nFileSizeLow=0x15e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="8F1E9Jbg.pps", cAlternateFileName="")) returned 1
	[0128.854] FindNextFileW (in: hFindFile=0xd9d640, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1dfc740, ftCreationTime.dwHighDateTime=0x1d5e1e9, ftLastAccessTime.dwLowDateTime=0x56b1b2d0, ftLastAccessTime.dwHighDateTime=0x1d5e9e0, ftLastWriteTime.dwLowDateTime=0x56b1b2d0, ftLastWriteTime.dwHighDateTime=0x1d5e9e0, nFileSizeHigh=0x0, nFileSizeLow=0x864b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mDwXD_pFFAvrnewTjv6.xls", cAlternateFileName="MDWXD_~1.XLS")) returned 1
	[0128.854] FindNextFileW (in: hFindFile=0xd9d640, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37c47c90, ftCreationTime.dwHighDateTime=0x1d5e2a6, ftLastAccessTime.dwLowDateTime=0xf51c64c0, ftLastAccessTime.dwHighDateTime=0x1d5e2be, ftLastWriteTime.dwLowDateTime=0xf51c64c0, ftLastWriteTime.dwHighDateTime=0x1d5e2be, nFileSizeHigh=0x0, nFileSizeLow=0xb744, dwReserved0=0x0, dwReserved1=0x0, cFileName="p1S1XGXYN6TZJW_.ppt", cAlternateFileName="P1S1XG~1.PPT")) returned 1
	[0128.855] FindNextFileW (in: hFindFile=0xd9d640, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfce6500, ftCreationTime.dwHighDateTime=0x1d5ef59, ftLastAccessTime.dwLowDateTime=0xa9421410, ftLastAccessTime.dwHighDateTime=0x1d5e6a5, ftLastWriteTime.dwLowDateTime=0xa9421410, ftLastWriteTime.dwHighDateTime=0x1d5e6a5, nFileSizeHigh=0x0, nFileSizeLow=0x453f, dwReserved0=0x0, dwReserved1=0x0, cFileName="XhPfANm2Gb7GgdSY.csv", cAlternateFileName="XHPFAN~1.CSV")) returned 1
	[0128.855] FindNextFileW (in: hFindFile=0xd9d640, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0f0180, ftCreationTime.dwHighDateTime=0x1d5eb5b, ftLastAccessTime.dwLowDateTime=0x305cc210, ftLastAccessTime.dwHighDateTime=0x1d5ec28, ftLastWriteTime.dwLowDateTime=0x305cc210, ftLastWriteTime.dwHighDateTime=0x1d5ec28, nFileSizeHigh=0x0, nFileSizeLow=0xfc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="y160MkRXLFF_Z.xlsx", cAlternateFileName="Y160MK~1.XLS")) returned 1
	[0128.855] FindNextFileW (in: hFindFile=0xd9d640, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.855] FindClose (in: hFindFile=0xd9d640 | out: hFindFile=0xd9d640) returned 1
	[0128.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0128.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0128.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0128.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0128.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe", lpFilePart=0x0) returned 0x2e
	[0128.856] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc55909e0, ftCreationTime.dwHighDateTime=0x1d5ec60, ftLastAccessTime.dwLowDateTime=0x57eafc60, ftLastAccessTime.dwHighDateTime=0x1d5eb70, ftLastWriteTime.dwLowDateTime=0x57eafc60, ftLastWriteTime.dwHighDateTime=0x1d5eb70, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d640
	[0128.856] FindNextFileW (in: hFindFile=0xd9d640, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc55909e0, ftCreationTime.dwHighDateTime=0x1d5ec60, ftLastAccessTime.dwLowDateTime=0x57eafc60, ftLastAccessTime.dwHighDateTime=0x1d5eb70, ftLastWriteTime.dwLowDateTime=0x57eafc60, ftLastWriteTime.dwHighDateTime=0x1d5eb70, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.856] FindNextFileW (in: hFindFile=0xd9d640, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x221081d0, ftCreationTime.dwHighDateTime=0x1d5ee4c, ftLastAccessTime.dwLowDateTime=0x3bc059c0, ftLastAccessTime.dwHighDateTime=0x1d5ec53, ftLastWriteTime.dwLowDateTime=0x3bc059c0, ftLastWriteTime.dwHighDateTime=0x1d5ec53, nFileSizeHigh=0x0, nFileSizeLow=0x15e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="8F1E9Jbg.pps", cAlternateFileName="")) returned 1
	[0128.856] FindNextFileW (in: hFindFile=0xd9d640, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1dfc740, ftCreationTime.dwHighDateTime=0x1d5e1e9, ftLastAccessTime.dwLowDateTime=0x56b1b2d0, ftLastAccessTime.dwHighDateTime=0x1d5e9e0, ftLastWriteTime.dwLowDateTime=0x56b1b2d0, ftLastWriteTime.dwHighDateTime=0x1d5e9e0, nFileSizeHigh=0x0, nFileSizeLow=0x864b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mDwXD_pFFAvrnewTjv6.xls", cAlternateFileName="MDWXD_~1.XLS")) returned 1
	[0128.857] FindNextFileW (in: hFindFile=0xd9d640, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37c47c90, ftCreationTime.dwHighDateTime=0x1d5e2a6, ftLastAccessTime.dwLowDateTime=0xf51c64c0, ftLastAccessTime.dwHighDateTime=0x1d5e2be, ftLastWriteTime.dwLowDateTime=0xf51c64c0, ftLastWriteTime.dwHighDateTime=0x1d5e2be, nFileSizeHigh=0x0, nFileSizeLow=0xb744, dwReserved0=0x0, dwReserved1=0x0, cFileName="p1S1XGXYN6TZJW_.ppt", cAlternateFileName="P1S1XG~1.PPT")) returned 1
	[0128.857] FindNextFileW (in: hFindFile=0xd9d640, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfce6500, ftCreationTime.dwHighDateTime=0x1d5ef59, ftLastAccessTime.dwLowDateTime=0xa9421410, ftLastAccessTime.dwHighDateTime=0x1d5e6a5, ftLastWriteTime.dwLowDateTime=0xa9421410, ftLastWriteTime.dwHighDateTime=0x1d5e6a5, nFileSizeHigh=0x0, nFileSizeLow=0x453f, dwReserved0=0x0, dwReserved1=0x0, cFileName="XhPfANm2Gb7GgdSY.csv", cAlternateFileName="XHPFAN~1.CSV")) returned 1
	[0128.857] FindNextFileW (in: hFindFile=0xd9d640, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0f0180, ftCreationTime.dwHighDateTime=0x1d5eb5b, ftLastAccessTime.dwLowDateTime=0x305cc210, ftLastAccessTime.dwHighDateTime=0x1d5ec28, ftLastWriteTime.dwLowDateTime=0x305cc210, ftLastWriteTime.dwHighDateTime=0x1d5ec28, nFileSizeHigh=0x0, nFileSizeLow=0xfc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="y160MkRXLFF_Z.xlsx", cAlternateFileName="Y160MK~1.XLS")) returned 1
	[0128.857] FindNextFileW (in: hFindFile=0xd9d640, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0f0180, ftCreationTime.dwHighDateTime=0x1d5eb5b, ftLastAccessTime.dwLowDateTime=0x305cc210, ftLastAccessTime.dwHighDateTime=0x1d5ec28, ftLastWriteTime.dwLowDateTime=0x305cc210, ftLastWriteTime.dwHighDateTime=0x1d5ec28, nFileSizeHigh=0x0, nFileSizeLow=0xfc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="y160MkRXLFF_Z.xlsx", cAlternateFileName="Y160MK~1.XLS")) returned 0
	[0128.858] FindClose (in: hFindFile=0xd9d640 | out: hFindFile=0xd9d640) returned 1
	[0128.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0128.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0128.858] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47
	[0128.858] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls", nBufferLength=0x47, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls", lpFilePart=0x0) returned 0x46
	[0128.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.858] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\mdwxd_pffavrnewtjv6.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0128.858] GetFileType (hFile=0x2d0) returned 0x1
	[0128.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.858] GetFileType (hFile=0x2d0) returned 0x1
	[0128.858] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x864b
	[0128.859] ReadFile (in: hFile=0x2d0, lpBuffer=0x298158c, nNumberOfBytesToRead=0x864b, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x298158c*, lpNumberOfBytesRead=0xafe928*=0x864b, lpOverlapped=0x0) returned 1
	[0128.859] CloseHandle (hObject=0x2d0) returned 1
	[0128.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0128.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0128.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47
	[0128.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls", nBufferLength=0x47, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls", lpFilePart=0x0) returned 0x46
	[0128.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0128.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\mdwxd_pffavrnewtjv6.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0128.944] GetFileType (hFile=0x2d0) returned 0x1
	[0128.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0128.945] GetFileType (hFile=0x2d0) returned 0x1
	[0128.945] WriteFile (in: hFile=0x2d0, lpBuffer=0x29f8464*, nNumberOfBytesToWrite=0x8650, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x29f8464*, lpNumberOfBytesWritten=0xafe91c*=0x8650, lpOverlapped=0x0) returned 1
	[0128.946] CloseHandle (hObject=0x2d0) returned 1
	[0128.965] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47
	[0128.966] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls", nBufferLength=0x47, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls", lpFilePart=0x0) returned 0x46
	[0128.966] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d
	[0128.966] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls.rogue", nBufferLength=0x4d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls.rogue", lpFilePart=0x0) returned 0x4c
	[0128.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0128.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\mdwxd_pffavrnewtjv6.xls"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1dfc740, ftCreationTime.dwHighDateTime=0x1d5e1e9, ftLastAccessTime.dwLowDateTime=0x56b1b2d0, ftLastAccessTime.dwHighDateTime=0x1d5e9e0, ftLastWriteTime.dwLowDateTime=0xae22910e, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x8650)) returned 1
	[0128.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0128.966] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\mdwxd_pffavrnewtjv6.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\mDwXD_pFFAvrnewTjv6.xls.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\mdwxd_pffavrnewtjv6.xls.rogue")) returned 1
	[0128.967] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43
	[0128.967] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt", nBufferLength=0x43, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt", lpFilePart=0x0) returned 0x42
	[0128.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.967] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\p1s1xgxyn6tzjw_.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0128.967] GetFileType (hFile=0x2d0) returned 0x1
	[0128.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.968] GetFileType (hFile=0x2d0) returned 0x1
	[0128.968] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0xb744
	[0128.968] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a00d68, nNumberOfBytesToRead=0xb744, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2a00d68*, lpNumberOfBytesRead=0xafe928*=0xb744, lpOverlapped=0x0) returned 1
	[0128.968] CloseHandle (hObject=0x2d0) returned 1
	[0128.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0128.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0128.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0128.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0128.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43
	[0128.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt", nBufferLength=0x43, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt", lpFilePart=0x0) returned 0x42
	[0128.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0128.988] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\p1s1xgxyn6tzjw_.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0128.989] GetFileType (hFile=0x2d0) returned 0x1
	[0128.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0128.990] GetFileType (hFile=0x2d0) returned 0x1
	[0128.990] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a70154*, nNumberOfBytesToWrite=0xb750, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2a70154*, lpNumberOfBytesWritten=0xafe91c*=0xb750, lpOverlapped=0x0) returned 1
	[0128.991] CloseHandle (hObject=0x2d0) returned 1
	[0128.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43
	[0128.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt", nBufferLength=0x43, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt", lpFilePart=0x0) returned 0x42
	[0128.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49
	[0128.994] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt.rogue", nBufferLength=0x49, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt.rogue", lpFilePart=0x0) returned 0x48
	[0128.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0128.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\p1s1xgxyn6tzjw_.ppt"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37c47c90, ftCreationTime.dwHighDateTime=0x1d5e2a6, ftLastAccessTime.dwLowDateTime=0xf51c64c0, ftLastAccessTime.dwHighDateTime=0x1d5e2be, ftLastWriteTime.dwLowDateTime=0xae24f461, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xb750)) returned 1
	[0128.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0128.994] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\p1s1xgxyn6tzjw_.ppt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\p1S1XGXYN6TZJW_.ppt.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\p1s1xgxyn6tzjw_.ppt.rogue")) returned 1
	[0128.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44
	[0128.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv", nBufferLength=0x44, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv", lpFilePart=0x0) returned 0x43
	[0128.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0128.995] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\xhpfanm2gb7ggdsy.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0128.995] GetFileType (hFile=0x2d0) returned 0x1
	[0128.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0128.995] GetFileType (hFile=0x2d0) returned 0x1
	[0128.995] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x453f
	[0128.995] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a7bb4c, nNumberOfBytesToRead=0x453f, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2a7bb4c*, lpNumberOfBytesRead=0xafe928*=0x453f, lpOverlapped=0x0) returned 1
	[0128.996] CloseHandle (hObject=0x2d0) returned 1
	[0129.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44
	[0129.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv", nBufferLength=0x44, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv", lpFilePart=0x0) returned 0x43
	[0129.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0129.014] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\xhpfanm2gb7ggdsy.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.015] GetFileType (hFile=0x2d0) returned 0x1
	[0129.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0129.015] GetFileType (hFile=0x2d0) returned 0x1
	[0129.016] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ade378*, nNumberOfBytesToWrite=0x4540, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2ade378*, lpNumberOfBytesWritten=0xafe91c*=0x4540, lpOverlapped=0x0) returned 1
	[0129.017] CloseHandle (hObject=0x2d0) returned 1
	[0129.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44
	[0129.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv", nBufferLength=0x44, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv", lpFilePart=0x0) returned 0x43
	[0129.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a
	[0129.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv.rogue", nBufferLength=0x4a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv.rogue", lpFilePart=0x0) returned 0x49
	[0129.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0129.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\xhpfanm2gb7ggdsy.csv"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfce6500, ftCreationTime.dwHighDateTime=0x1d5ef59, ftLastAccessTime.dwLowDateTime=0xa9421410, ftLastAccessTime.dwHighDateTime=0x1d5e6a5, ftLastWriteTime.dwLowDateTime=0xae29b876, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x4540)) returned 1
	[0129.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0129.018] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\xhpfanm2gb7ggdsy.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\XhPfANm2Gb7GgdSY.csv.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\xhpfanm2gb7ggdsy.csv.rogue")) returned 1
	[0129.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42
	[0129.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx", nBufferLength=0x42, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx", lpFilePart=0x0) returned 0x41
	[0129.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0129.019] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\y160mkrxlff_z.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.019] GetFileType (hFile=0x2d0) returned 0x1
	[0129.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0129.019] GetFileType (hFile=0x2d0) returned 0x1
	[0129.020] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0xfc74
	[0129.020] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ae2b60, nNumberOfBytesToRead=0xfc74, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2ae2b60*, lpNumberOfBytesRead=0xafe928*=0xfc74, lpOverlapped=0x0) returned 1
	[0129.021] CloseHandle (hObject=0x2d0) returned 1
	[0129.086] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.086] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.087] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42
	[0129.087] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx", nBufferLength=0x42, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx", lpFilePart=0x0) returned 0x41
	[0129.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0129.087] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\y160mkrxlff_z.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.089] GetFileType (hFile=0x2d0) returned 0x1
	[0129.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0129.089] GetFileType (hFile=0x2d0) returned 0x1
	[0129.090] WriteFile (in: hFile=0x2d0, lpBuffer=0x297e008*, nNumberOfBytesToWrite=0xfc80, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x297e008*, lpNumberOfBytesWritten=0xafe91c*=0xfc80, lpOverlapped=0x0) returned 1
	[0129.092] CloseHandle (hObject=0x2d0) returned 1
	[0129.095] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42
	[0129.096] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx", nBufferLength=0x42, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx", lpFilePart=0x0) returned 0x41
	[0129.096] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48
	[0129.096] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx.rogue", nBufferLength=0x48, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx.rogue", lpFilePart=0x0) returned 0x47
	[0129.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0129.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\y160mkrxlff_z.xlsx"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0f0180, ftCreationTime.dwHighDateTime=0x1d5eb5b, ftLastAccessTime.dwLowDateTime=0x305cc210, ftLastAccessTime.dwHighDateTime=0x1d5ec28, ftLastWriteTime.dwLowDateTime=0xae36d0eb, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xfc80)) returned 1
	[0129.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0129.096] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\y160mkrxlff_z.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\ogufMQXY1W_WKDrW8FLe\\y160MkRXLFF_Z.xlsx.rogue" (normalized: "c:\\users\\fd1hvy\\documents\\ogufmqxy1w_wkdrw8fle\\y160mkrxlff_z.xlsx.rogue")) returned 1
	[0129.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0129.097] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0129.097] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x27
	[0129.098] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d700
	[0129.098] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.099] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 1
	[0129.099] FindNextFileW (in: hFindFile=0xd9d700, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.099] FindClose (in: hFindFile=0xd9d700 | out: hFindFile=0xd9d700) returned 1
	[0129.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0129.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0129.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0129.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0129.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x27
	[0129.100] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d400
	[0129.101] FindNextFileW (in: hFindFile=0xd9d400, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.101] FindNextFileW (in: hFindFile=0xd9d400, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 1
	[0129.101] FindNextFileW (in: hFindFile=0xd9d400, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 0
	[0129.102] FindClose (in: hFindFile=0xd9d400 | out: hFindFile=0xd9d400) returned 1
	[0129.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0129.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0129.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0129.102] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a
	[0129.102] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x1a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19
	[0129.102] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d2c0
	[0129.103] FindNextFileW (in: hFindFile=0xd9d2c0, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.104] FindNextFileW (in: hFindFile=0xd9d2c0, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0129.104] FindNextFileW (in: hFindFile=0xd9d2c0, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.104] FindClose (in: hFindFile=0xd9d2c0 | out: hFindFile=0xd9d2c0) returned 1
	[0129.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0129.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0129.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0129.104] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a
	[0129.105] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x1a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19
	[0129.105] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d680
	[0129.106] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.107] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0129.107] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0129.107] FindClose (in: hFindFile=0xd9d680 | out: hFindFile=0xd9d680) returned 1
	[0129.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0129.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0129.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0129.108] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19
	[0129.108] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x19, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18
	[0129.108] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec69445e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec69445e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d680
	[0129.108] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec69445e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec69445e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.110] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30e86b60, ftCreationTime.dwHighDateTime=0x1d5ea27, ftLastAccessTime.dwLowDateTime=0xddff1d30, ftLastAccessTime.dwHighDateTime=0x1d5ebcb, ftLastWriteTime.dwLowDateTime=0xddff1d30, ftLastWriteTime.dwHighDateTime=0x1d5ebcb, nFileSizeHigh=0x0, nFileSizeLow=0x152f, dwReserved0=0x0, dwReserved1=0x0, cFileName="0cFqaFMqb561oNRDxreG.png", cAlternateFileName="0CFQAF~1.PNG")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c6ae70, ftCreationTime.dwHighDateTime=0x1d5eba3, ftLastAccessTime.dwLowDateTime=0x3cea09d0, ftLastAccessTime.dwHighDateTime=0x1d5e399, ftLastWriteTime.dwLowDateTime=0x3cea09d0, ftLastWriteTime.dwHighDateTime=0x1d5e399, nFileSizeHigh=0x0, nFileSizeLow=0x3a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="18pXkjZKh.jpg", cAlternateFileName="18PXKJ~1.JPG")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc525ad60, ftCreationTime.dwHighDateTime=0x1d5e748, ftLastAccessTime.dwLowDateTime=0x8ed0a960, ftLastAccessTime.dwHighDateTime=0x1d5ed4a, ftLastWriteTime.dwLowDateTime=0x8ed0a960, ftLastWriteTime.dwHighDateTime=0x1d5ed4a, nFileSizeHigh=0x0, nFileSizeLow=0x13f07, dwReserved0=0x0, dwReserved1=0x0, cFileName="3qBoUKpwpX.png", cAlternateFileName="3QBOUK~1.PNG")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x814c1850, ftCreationTime.dwHighDateTime=0x1d5eb70, ftLastAccessTime.dwLowDateTime=0x7ca9b7e0, ftLastAccessTime.dwHighDateTime=0x1d5e2f5, ftLastWriteTime.dwLowDateTime=0x7ca9b7e0, ftLastWriteTime.dwHighDateTime=0x1d5e2f5, nFileSizeHigh=0x0, nFileSizeLow=0xb63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bYOu8G62xocW.gif", cAlternateFileName="BYOU8G~1.GIF")) returned 1
	[0129.112] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf76975e0, ftCreationTime.dwHighDateTime=0x1d5ef9f, ftLastAccessTime.dwLowDateTime=0xe69b75a0, ftLastAccessTime.dwHighDateTime=0x1d5e442, ftLastWriteTime.dwLowDateTime=0xe69b75a0, ftLastWriteTime.dwHighDateTime=0x1d5e442, nFileSizeHigh=0x0, nFileSizeLow=0x8abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="C72HcCP4i1_NLz.bmp", cAlternateFileName="C72HCC~1.BMP")) returned 1
	[0129.112] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1
	[0129.113] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0129.113] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b5fd2f0, ftCreationTime.dwHighDateTime=0x1d5e368, ftLastAccessTime.dwLowDateTime=0xbaf93020, ftLastAccessTime.dwHighDateTime=0x1d5f123, ftLastWriteTime.dwLowDateTime=0xbaf93020, ftLastWriteTime.dwHighDateTime=0x1d5f123, nFileSizeHigh=0x0, nFileSizeLow=0x216a, dwReserved0=0x0, dwReserved1=0x0, cFileName="E5m8UTowOG9m.bmp", cAlternateFileName="E5M8UT~1.BMP")) returned 1
	[0129.113] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e0bb50, ftCreationTime.dwHighDateTime=0x1d5e92a, ftLastAccessTime.dwLowDateTime=0xc65f07e0, ftLastAccessTime.dwHighDateTime=0x1d5f034, ftLastWriteTime.dwLowDateTime=0xc65f07e0, ftLastWriteTime.dwHighDateTime=0x1d5f034, nFileSizeHigh=0x0, nFileSizeLow=0x3897, dwReserved0=0x0, dwReserved1=0x0, cFileName="FaK3EWgHsS21.bmp", cAlternateFileName="FAK3EW~1.BMP")) returned 1
	[0129.113] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9b03d0, ftCreationTime.dwHighDateTime=0x1d5efca, ftLastAccessTime.dwLowDateTime=0xa5515b40, ftLastAccessTime.dwHighDateTime=0x1d5eb6e, ftLastWriteTime.dwLowDateTime=0xa5515b40, ftLastWriteTime.dwHighDateTime=0x1d5eb6e, nFileSizeHigh=0x0, nFileSizeLow=0x91bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="HyNXTweLo1_k82GvL.png", cAlternateFileName="HYNXTW~1.PNG")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8690c8e0, ftCreationTime.dwHighDateTime=0x1d5e7da, ftLastAccessTime.dwLowDateTime=0x6dac4770, ftLastAccessTime.dwHighDateTime=0x1d5e0e4, ftLastWriteTime.dwLowDateTime=0x6dac4770, ftLastWriteTime.dwHighDateTime=0x1d5e0e4, nFileSizeHigh=0x0, nFileSizeLow=0xdc11, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ifc7jSiH2.png", cAlternateFileName="IFC7JS~1.PNG")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f4960, ftCreationTime.dwHighDateTime=0x1d5ef85, ftLastAccessTime.dwLowDateTime=0x8725f110, ftLastAccessTime.dwHighDateTime=0x1d5ecc9, ftLastWriteTime.dwLowDateTime=0x8725f110, ftLastWriteTime.dwHighDateTime=0x1d5ecc9, nFileSizeHigh=0x0, nFileSizeLow=0xeead, dwReserved0=0x0, dwReserved1=0x0, cFileName="J8jg8mU.png", cAlternateFileName="")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987b5390, ftCreationTime.dwHighDateTime=0x1d5e19a, ftLastAccessTime.dwLowDateTime=0x87c35470, ftLastAccessTime.dwHighDateTime=0x1d5ea56, ftLastWriteTime.dwLowDateTime=0x87c35470, ftLastWriteTime.dwHighDateTime=0x1d5ea56, nFileSizeHigh=0x0, nFileSizeLow=0x12150, dwReserved0=0x0, dwReserved1=0x0, cFileName="J9Ht.gif", cAlternateFileName="")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386232f0, ftCreationTime.dwHighDateTime=0x1d5e8d7, ftLastAccessTime.dwLowDateTime=0x118aa20, ftLastAccessTime.dwHighDateTime=0x1d5e212, ftLastWriteTime.dwLowDateTime=0x118aa20, ftLastWriteTime.dwHighDateTime=0x1d5e212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jq0y3iIsZa", cAlternateFileName="JQ0Y3I~1")) returned 1
	[0129.115] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98341d20, ftCreationTime.dwHighDateTime=0x1d5e697, ftLastAccessTime.dwLowDateTime=0xdc4a7780, ftLastAccessTime.dwHighDateTime=0x1d5f02d, ftLastWriteTime.dwLowDateTime=0xdc4a7780, ftLastWriteTime.dwHighDateTime=0x1d5f02d, nFileSizeHigh=0x0, nFileSizeLow=0x127a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="l6I-YOfmUp-Wn.bmp", cAlternateFileName="L6I-YO~1.BMP")) returned 1
	[0129.115] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97c4e580, ftCreationTime.dwHighDateTime=0x1d5e724, ftLastAccessTime.dwLowDateTime=0x7e926960, ftLastAccessTime.dwHighDateTime=0x1d5ee4b, ftLastWriteTime.dwLowDateTime=0x7e926960, ftLastWriteTime.dwHighDateTime=0x1d5ee4b, nFileSizeHigh=0x0, nFileSizeLow=0x4731, dwReserved0=0x0, dwReserved1=0x0, cFileName="LCFJDR.bmp", cAlternateFileName="")) returned 1
	[0129.115] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8896240, ftCreationTime.dwHighDateTime=0x1d5e50d, ftLastAccessTime.dwLowDateTime=0x22fd6bb0, ftLastAccessTime.dwHighDateTime=0x1d5e28c, ftLastWriteTime.dwLowDateTime=0x22fd6bb0, ftLastWriteTime.dwHighDateTime=0x1d5e28c, nFileSizeHigh=0x0, nFileSizeLow=0x2367, dwReserved0=0x0, dwReserved1=0x0, cFileName="olGO5uDJ.bmp", cAlternateFileName="")) returned 1
	[0129.116] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1
	[0129.116] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd22ea0, ftCreationTime.dwHighDateTime=0x1d5ef2b, ftLastAccessTime.dwLowDateTime=0xa2db0510, ftLastAccessTime.dwHighDateTime=0x1d5e19f, ftLastWriteTime.dwLowDateTime=0xa2db0510, ftLastWriteTime.dwHighDateTime=0x1d5e19f, nFileSizeHigh=0x0, nFileSizeLow=0x176d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sytye6.bmp", cAlternateFileName="")) returned 1
	[0129.116] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5a46040, ftCreationTime.dwHighDateTime=0x1d5ee0c, ftLastAccessTime.dwLowDateTime=0xb8991b50, ftLastAccessTime.dwHighDateTime=0x1d5e215, ftLastWriteTime.dwLowDateTime=0xb8991b50, ftLastWriteTime.dwHighDateTime=0x1d5e215, nFileSizeHigh=0x0, nFileSizeLow=0x14653, dwReserved0=0x0, dwReserved1=0x0, cFileName="uwhInrLPl7zW.jpg", cAlternateFileName="UWHINR~1.JPG")) returned 1
	[0129.117] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec568db0, ftCreationTime.dwHighDateTime=0x1d5e80a, ftLastAccessTime.dwLowDateTime=0x38d56c20, ftLastAccessTime.dwHighDateTime=0x1d5ed82, ftLastWriteTime.dwLowDateTime=0x38d56c20, ftLastWriteTime.dwHighDateTime=0x1d5ed82, nFileSizeHigh=0x0, nFileSizeLow=0xa7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="vVVfQa.bmp", cAlternateFileName="")) returned 1
	[0129.117] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b525030, ftCreationTime.dwHighDateTime=0x1d5ec1a, ftLastAccessTime.dwLowDateTime=0xc7a59ac0, ftLastAccessTime.dwHighDateTime=0x1d5ebd8, ftLastWriteTime.dwLowDateTime=0xc7a59ac0, ftLastWriteTime.dwHighDateTime=0x1d5ebd8, nFileSizeHigh=0x0, nFileSizeLow=0x18162, dwReserved0=0x0, dwReserved1=0x0, cFileName="X0SNUaxzFkE.bmp", cAlternateFileName="X0SNUA~1.BMP")) returned 1
	[0129.117] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc35cb900, ftCreationTime.dwHighDateTime=0x1d5e910, ftLastAccessTime.dwLowDateTime=0xe88c9590, ftLastAccessTime.dwHighDateTime=0x1d5e566, ftLastWriteTime.dwLowDateTime=0xe88c9590, ftLastWriteTime.dwHighDateTime=0x1d5e566, nFileSizeHigh=0x0, nFileSizeLow=0x3cd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="yJ7aTEI1D.gif", cAlternateFileName="YJ7ATE~1.GIF")) returned 1
	[0129.118] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7719ad90, ftCreationTime.dwHighDateTime=0x1d5f0eb, ftLastAccessTime.dwLowDateTime=0xbc6234d0, ftLastAccessTime.dwHighDateTime=0x1d5ec27, ftLastWriteTime.dwLowDateTime=0xbc6234d0, ftLastWriteTime.dwHighDateTime=0x1d5ec27, nFileSizeHigh=0x0, nFileSizeLow=0x15a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="zOYqOHSZ36mWNsz6.jpg", cAlternateFileName="ZOYQOH~1.JPG")) returned 1
	[0129.118] FindNextFileW (in: hFindFile=0xd9d680, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.118] FindClose (in: hFindFile=0xd9d680 | out: hFindFile=0xd9d680) returned 1
	[0129.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0129.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0129.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0129.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19
	[0129.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x19, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18
	[0129.119] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec69445e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec69445e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd9d240
	[0129.120] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec69445e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec69445e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.121] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30e86b60, ftCreationTime.dwHighDateTime=0x1d5ea27, ftLastAccessTime.dwLowDateTime=0xddff1d30, ftLastAccessTime.dwHighDateTime=0x1d5ebcb, ftLastWriteTime.dwLowDateTime=0xddff1d30, ftLastWriteTime.dwHighDateTime=0x1d5ebcb, nFileSizeHigh=0x0, nFileSizeLow=0x152f, dwReserved0=0x0, dwReserved1=0x0, cFileName="0cFqaFMqb561oNRDxreG.png", cAlternateFileName="0CFQAF~1.PNG")) returned 1
	[0129.121] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c6ae70, ftCreationTime.dwHighDateTime=0x1d5eba3, ftLastAccessTime.dwLowDateTime=0x3cea09d0, ftLastAccessTime.dwHighDateTime=0x1d5e399, ftLastWriteTime.dwLowDateTime=0x3cea09d0, ftLastWriteTime.dwHighDateTime=0x1d5e399, nFileSizeHigh=0x0, nFileSizeLow=0x3a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="18pXkjZKh.jpg", cAlternateFileName="18PXKJ~1.JPG")) returned 1
	[0129.121] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc525ad60, ftCreationTime.dwHighDateTime=0x1d5e748, ftLastAccessTime.dwLowDateTime=0x8ed0a960, ftLastAccessTime.dwHighDateTime=0x1d5ed4a, ftLastWriteTime.dwLowDateTime=0x8ed0a960, ftLastWriteTime.dwHighDateTime=0x1d5ed4a, nFileSizeHigh=0x0, nFileSizeLow=0x13f07, dwReserved0=0x0, dwReserved1=0x0, cFileName="3qBoUKpwpX.png", cAlternateFileName="3QBOUK~1.PNG")) returned 1
	[0129.122] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x814c1850, ftCreationTime.dwHighDateTime=0x1d5eb70, ftLastAccessTime.dwLowDateTime=0x7ca9b7e0, ftLastAccessTime.dwHighDateTime=0x1d5e2f5, ftLastWriteTime.dwLowDateTime=0x7ca9b7e0, ftLastWriteTime.dwHighDateTime=0x1d5e2f5, nFileSizeHigh=0x0, nFileSizeLow=0xb63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bYOu8G62xocW.gif", cAlternateFileName="BYOU8G~1.GIF")) returned 1
	[0129.122] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf76975e0, ftCreationTime.dwHighDateTime=0x1d5ef9f, ftLastAccessTime.dwLowDateTime=0xe69b75a0, ftLastAccessTime.dwHighDateTime=0x1d5e442, ftLastWriteTime.dwLowDateTime=0xe69b75a0, ftLastWriteTime.dwHighDateTime=0x1d5e442, nFileSizeHigh=0x0, nFileSizeLow=0x8abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="C72HcCP4i1_NLz.bmp", cAlternateFileName="C72HCC~1.BMP")) returned 1
	[0129.122] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1
	[0129.123] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0129.123] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b5fd2f0, ftCreationTime.dwHighDateTime=0x1d5e368, ftLastAccessTime.dwLowDateTime=0xbaf93020, ftLastAccessTime.dwHighDateTime=0x1d5f123, ftLastWriteTime.dwLowDateTime=0xbaf93020, ftLastWriteTime.dwHighDateTime=0x1d5f123, nFileSizeHigh=0x0, nFileSizeLow=0x216a, dwReserved0=0x0, dwReserved1=0x0, cFileName="E5m8UTowOG9m.bmp", cAlternateFileName="E5M8UT~1.BMP")) returned 1
	[0129.123] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e0bb50, ftCreationTime.dwHighDateTime=0x1d5e92a, ftLastAccessTime.dwLowDateTime=0xc65f07e0, ftLastAccessTime.dwHighDateTime=0x1d5f034, ftLastWriteTime.dwLowDateTime=0xc65f07e0, ftLastWriteTime.dwHighDateTime=0x1d5f034, nFileSizeHigh=0x0, nFileSizeLow=0x3897, dwReserved0=0x0, dwReserved1=0x0, cFileName="FaK3EWgHsS21.bmp", cAlternateFileName="FAK3EW~1.BMP")) returned 1
	[0129.124] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9b03d0, ftCreationTime.dwHighDateTime=0x1d5efca, ftLastAccessTime.dwLowDateTime=0xa5515b40, ftLastAccessTime.dwHighDateTime=0x1d5eb6e, ftLastWriteTime.dwLowDateTime=0xa5515b40, ftLastWriteTime.dwHighDateTime=0x1d5eb6e, nFileSizeHigh=0x0, nFileSizeLow=0x91bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="HyNXTweLo1_k82GvL.png", cAlternateFileName="HYNXTW~1.PNG")) returned 1
	[0129.124] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8690c8e0, ftCreationTime.dwHighDateTime=0x1d5e7da, ftLastAccessTime.dwLowDateTime=0x6dac4770, ftLastAccessTime.dwHighDateTime=0x1d5e0e4, ftLastWriteTime.dwLowDateTime=0x6dac4770, ftLastWriteTime.dwHighDateTime=0x1d5e0e4, nFileSizeHigh=0x0, nFileSizeLow=0xdc11, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ifc7jSiH2.png", cAlternateFileName="IFC7JS~1.PNG")) returned 1
	[0129.124] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f4960, ftCreationTime.dwHighDateTime=0x1d5ef85, ftLastAccessTime.dwLowDateTime=0x8725f110, ftLastAccessTime.dwHighDateTime=0x1d5ecc9, ftLastWriteTime.dwLowDateTime=0x8725f110, ftLastWriteTime.dwHighDateTime=0x1d5ecc9, nFileSizeHigh=0x0, nFileSizeLow=0xeead, dwReserved0=0x0, dwReserved1=0x0, cFileName="J8jg8mU.png", cAlternateFileName="")) returned 1
	[0129.125] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987b5390, ftCreationTime.dwHighDateTime=0x1d5e19a, ftLastAccessTime.dwLowDateTime=0x87c35470, ftLastAccessTime.dwHighDateTime=0x1d5ea56, ftLastWriteTime.dwLowDateTime=0x87c35470, ftLastWriteTime.dwHighDateTime=0x1d5ea56, nFileSizeHigh=0x0, nFileSizeLow=0x12150, dwReserved0=0x0, dwReserved1=0x0, cFileName="J9Ht.gif", cAlternateFileName="")) returned 1
	[0129.125] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386232f0, ftCreationTime.dwHighDateTime=0x1d5e8d7, ftLastAccessTime.dwLowDateTime=0x118aa20, ftLastAccessTime.dwHighDateTime=0x1d5e212, ftLastWriteTime.dwLowDateTime=0x118aa20, ftLastWriteTime.dwHighDateTime=0x1d5e212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jq0y3iIsZa", cAlternateFileName="JQ0Y3I~1")) returned 1
	[0129.125] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98341d20, ftCreationTime.dwHighDateTime=0x1d5e697, ftLastAccessTime.dwLowDateTime=0xdc4a7780, ftLastAccessTime.dwHighDateTime=0x1d5f02d, ftLastWriteTime.dwLowDateTime=0xdc4a7780, ftLastWriteTime.dwHighDateTime=0x1d5f02d, nFileSizeHigh=0x0, nFileSizeLow=0x127a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="l6I-YOfmUp-Wn.bmp", cAlternateFileName="L6I-YO~1.BMP")) returned 1
	[0129.125] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97c4e580, ftCreationTime.dwHighDateTime=0x1d5e724, ftLastAccessTime.dwLowDateTime=0x7e926960, ftLastAccessTime.dwHighDateTime=0x1d5ee4b, ftLastWriteTime.dwLowDateTime=0x7e926960, ftLastWriteTime.dwHighDateTime=0x1d5ee4b, nFileSizeHigh=0x0, nFileSizeLow=0x4731, dwReserved0=0x0, dwReserved1=0x0, cFileName="LCFJDR.bmp", cAlternateFileName="")) returned 1
	[0129.126] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8896240, ftCreationTime.dwHighDateTime=0x1d5e50d, ftLastAccessTime.dwLowDateTime=0x22fd6bb0, ftLastAccessTime.dwHighDateTime=0x1d5e28c, ftLastWriteTime.dwLowDateTime=0x22fd6bb0, ftLastWriteTime.dwHighDateTime=0x1d5e28c, nFileSizeHigh=0x0, nFileSizeLow=0x2367, dwReserved0=0x0, dwReserved1=0x0, cFileName="olGO5uDJ.bmp", cAlternateFileName="")) returned 1
	[0129.126] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1
	[0129.126] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd22ea0, ftCreationTime.dwHighDateTime=0x1d5ef2b, ftLastAccessTime.dwLowDateTime=0xa2db0510, ftLastAccessTime.dwHighDateTime=0x1d5e19f, ftLastWriteTime.dwLowDateTime=0xa2db0510, ftLastWriteTime.dwHighDateTime=0x1d5e19f, nFileSizeHigh=0x0, nFileSizeLow=0x176d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sytye6.bmp", cAlternateFileName="")) returned 1
	[0129.126] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5a46040, ftCreationTime.dwHighDateTime=0x1d5ee0c, ftLastAccessTime.dwLowDateTime=0xb8991b50, ftLastAccessTime.dwHighDateTime=0x1d5e215, ftLastWriteTime.dwLowDateTime=0xb8991b50, ftLastWriteTime.dwHighDateTime=0x1d5e215, nFileSizeHigh=0x0, nFileSizeLow=0x14653, dwReserved0=0x0, dwReserved1=0x0, cFileName="uwhInrLPl7zW.jpg", cAlternateFileName="UWHINR~1.JPG")) returned 1
	[0129.127] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec568db0, ftCreationTime.dwHighDateTime=0x1d5e80a, ftLastAccessTime.dwLowDateTime=0x38d56c20, ftLastAccessTime.dwHighDateTime=0x1d5ed82, ftLastWriteTime.dwLowDateTime=0x38d56c20, ftLastWriteTime.dwHighDateTime=0x1d5ed82, nFileSizeHigh=0x0, nFileSizeLow=0xa7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="vVVfQa.bmp", cAlternateFileName="")) returned 1
	[0129.127] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b525030, ftCreationTime.dwHighDateTime=0x1d5ec1a, ftLastAccessTime.dwLowDateTime=0xc7a59ac0, ftLastAccessTime.dwHighDateTime=0x1d5ebd8, ftLastWriteTime.dwLowDateTime=0xc7a59ac0, ftLastWriteTime.dwHighDateTime=0x1d5ebd8, nFileSizeHigh=0x0, nFileSizeLow=0x18162, dwReserved0=0x0, dwReserved1=0x0, cFileName="X0SNUaxzFkE.bmp", cAlternateFileName="X0SNUA~1.BMP")) returned 1
	[0129.127] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc35cb900, ftCreationTime.dwHighDateTime=0x1d5e910, ftLastAccessTime.dwLowDateTime=0xe88c9590, ftLastAccessTime.dwHighDateTime=0x1d5e566, ftLastWriteTime.dwLowDateTime=0xe88c9590, ftLastWriteTime.dwHighDateTime=0x1d5e566, nFileSizeHigh=0x0, nFileSizeLow=0x3cd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="yJ7aTEI1D.gif", cAlternateFileName="YJ7ATE~1.GIF")) returned 1
	[0129.128] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7719ad90, ftCreationTime.dwHighDateTime=0x1d5f0eb, ftLastAccessTime.dwLowDateTime=0xbc6234d0, ftLastAccessTime.dwHighDateTime=0x1d5ec27, ftLastWriteTime.dwLowDateTime=0xbc6234d0, ftLastWriteTime.dwHighDateTime=0x1d5ec27, nFileSizeHigh=0x0, nFileSizeLow=0x15a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="zOYqOHSZ36mWNsz6.jpg", cAlternateFileName="ZOYQOH~1.JPG")) returned 1
	[0129.128] FindNextFileW (in: hFindFile=0xd9d240, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7719ad90, ftCreationTime.dwHighDateTime=0x1d5f0eb, ftLastAccessTime.dwLowDateTime=0xbc6234d0, ftLastAccessTime.dwHighDateTime=0x1d5ec27, ftLastWriteTime.dwLowDateTime=0xbc6234d0, ftLastWriteTime.dwHighDateTime=0x1d5ec27, nFileSizeHigh=0x0, nFileSizeLow=0x15a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="zOYqOHSZ36mWNsz6.jpg", cAlternateFileName="ZOYQOH~1.JPG")) returned 0
	[0129.128] FindClose (in: hFindFile=0xd9d240 | out: hFindFile=0xd9d240) returned 1
	[0129.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0129.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0129.129] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0129.129] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png", lpFilePart=0x0) returned 0x31
	[0129.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.129] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png" (normalized: "c:\\users\\fd1hvy\\pictures\\0cfqafmqb561onrdxreg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.129] GetFileType (hFile=0x2d0) returned 0x1
	[0129.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.129] GetFileType (hFile=0x2d0) returned 0x1
	[0129.129] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x152f
	[0129.129] ReadFile (in: hFile=0x2d0, lpBuffer=0x2993e00, nNumberOfBytesToRead=0x152f, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2993e00*, lpNumberOfBytesRead=0xafe99c*=0x152f, lpOverlapped=0x0) returned 1
	[0129.130] CloseHandle (hObject=0x2d0) returned 1
	[0129.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0129.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0129.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0129.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png", lpFilePart=0x0) returned 0x31
	[0129.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0129.157] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png" (normalized: "c:\\users\\fd1hvy\\pictures\\0cfqafmqb561onrdxreg.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.159] GetFileType (hFile=0x2d0) returned 0x1
	[0129.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0129.159] GetFileType (hFile=0x2d0) returned 0x1
	[0129.159] WriteFile (in: hFile=0x2d0, lpBuffer=0x29e7738*, nNumberOfBytesToWrite=0x1530, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x29e7738*, lpNumberOfBytesWritten=0xafe990*=0x1530, lpOverlapped=0x0) returned 1
	[0129.160] CloseHandle (hObject=0x2d0) returned 1
	[0129.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0129.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png", lpFilePart=0x0) returned 0x31
	[0129.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38
	[0129.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png.rogue", nBufferLength=0x38, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png.rogue", lpFilePart=0x0) returned 0x37
	[0129.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0129.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png" (normalized: "c:\\users\\fd1hvy\\pictures\\0cfqafmqb561onrdxreg.png"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30e86b60, ftCreationTime.dwHighDateTime=0x1d5ea27, ftLastAccessTime.dwLowDateTime=0xddff1d30, ftLastAccessTime.dwHighDateTime=0x1d5ebcb, ftLastWriteTime.dwLowDateTime=0xae3f5b97, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x1530)) returned 1
	[0129.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0129.167] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png" (normalized: "c:\\users\\fd1hvy\\pictures\\0cfqafmqb561onrdxreg.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\0cFqaFMqb561oNRDxreG.png.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\0cfqafmqb561onrdxreg.png.rogue")) returned 1
	[0129.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0129.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg", lpFilePart=0x0) returned 0x26
	[0129.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.169] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\18pxkjzkh.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.169] GetFileType (hFile=0x2d0) returned 0x1
	[0129.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.169] GetFileType (hFile=0x2d0) returned 0x1
	[0129.169] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x3a80
	[0129.169] ReadFile (in: hFile=0x2d0, lpBuffer=0x29e8ee8, nNumberOfBytesToRead=0x3a80, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x29e8ee8*, lpNumberOfBytesRead=0xafe99c*=0x3a80, lpOverlapped=0x0) returned 1
	[0129.170] CloseHandle (hObject=0x2d0) returned 1
	[0129.275] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.275] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0129.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0129.275] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0129.275] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg", lpFilePart=0x0) returned 0x26
	[0129.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0129.275] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\18pxkjzkh.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.276] GetFileType (hFile=0x2d0) returned 0x1
	[0129.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0129.277] GetFileType (hFile=0x2d0) returned 0x1
	[0129.277] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a481a0*, nNumberOfBytesToWrite=0x3a90, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a481a0*, lpNumberOfBytesWritten=0xafe990*=0x3a90, lpOverlapped=0x0) returned 1
	[0129.278] CloseHandle (hObject=0x2d0) returned 1
	[0129.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0129.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg", lpFilePart=0x0) returned 0x26
	[0129.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0129.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg.rogue", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg.rogue", lpFilePart=0x0) returned 0x2c
	[0129.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0129.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\18pxkjzkh.jpg"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c6ae70, ftCreationTime.dwHighDateTime=0x1d5eba3, ftLastAccessTime.dwLowDateTime=0x3cea09d0, ftLastAccessTime.dwHighDateTime=0x1d5e399, ftLastWriteTime.dwLowDateTime=0xae540378, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x3a90)) returned 1
	[0129.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0129.288] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\18pxkjzkh.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\18pXkjZKh.jpg.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\18pxkjzkh.jpg.rogue")) returned 1
	[0129.290] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0129.290] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png", lpFilePart=0x0) returned 0x27
	[0129.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.290] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png" (normalized: "c:\\users\\fd1hvy\\pictures\\3qboukpwpx.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.290] GetFileType (hFile=0x2d0) returned 0x1
	[0129.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.290] GetFileType (hFile=0x2d0) returned 0x1
	[0129.290] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x13f07
	[0129.290] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a4be88, nNumberOfBytesToRead=0x13f07, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a4be88*, lpNumberOfBytesRead=0xafe99c*=0x13f07, lpOverlapped=0x0) returned 1
	[0129.291] CloseHandle (hObject=0x2d0) returned 1
	[0129.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0129.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0129.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0129.323] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png", lpFilePart=0x0) returned 0x27
	[0129.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0129.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png" (normalized: "c:\\users\\fd1hvy\\pictures\\3qboukpwpx.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.325] GetFileType (hFile=0x2d0) returned 0x1
	[0129.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0129.325] GetFileType (hFile=0x2d0) returned 0x1
	[0129.325] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ad49b8*, nNumberOfBytesToWrite=0x13f10, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2ad49b8*, lpNumberOfBytesWritten=0xafe990*=0x13f10, lpOverlapped=0x0) returned 1
	[0129.328] CloseHandle (hObject=0x2d0) returned 1
	[0129.340] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0129.340] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png", lpFilePart=0x0) returned 0x27
	[0129.340] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0129.340] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png.rogue", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png.rogue", lpFilePart=0x0) returned 0x2d
	[0129.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0129.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png" (normalized: "c:\\users\\fd1hvy\\pictures\\3qboukpwpx.png"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc525ad60, ftCreationTime.dwHighDateTime=0x1d5e748, ftLastAccessTime.dwLowDateTime=0x8ed0a960, ftLastAccessTime.dwHighDateTime=0x1d5ed4a, ftLastWriteTime.dwLowDateTime=0xae5ac599, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x13f10)) returned 1
	[0129.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0129.341] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png" (normalized: "c:\\users\\fd1hvy\\pictures\\3qboukpwpx.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\3qBoUKpwpX.png.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\3qboukpwpx.png.rogue")) returned 1
	[0129.341] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0129.341] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp", lpFilePart=0x0) returned 0x2b
	[0129.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.342] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\c72hccp4i1_nlz.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.342] GetFileType (hFile=0x2d0) returned 0x1
	[0129.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.342] GetFileType (hFile=0x2d0) returned 0x1
	[0129.342] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x8abc
	[0129.342] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ae8b44, nNumberOfBytesToRead=0x8abc, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2ae8b44*, lpNumberOfBytesRead=0xafe99c*=0x8abc, lpOverlapped=0x0) returned 1
	[0129.343] CloseHandle (hObject=0x2d0) returned 1
	[0129.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0129.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0129.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0129.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp", lpFilePart=0x0) returned 0x2b
	[0129.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0129.371] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\c72hccp4i1_nlz.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.373] GetFileType (hFile=0x2d0) returned 0x1
	[0129.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0129.373] GetFileType (hFile=0x2d0) returned 0x1
	[0129.373] WriteFile (in: hFile=0x2d0, lpBuffer=0x2b60eec*, nNumberOfBytesToWrite=0x8ac0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2b60eec*, lpNumberOfBytesWritten=0xafe990*=0x8ac0, lpOverlapped=0x0) returned 1
	[0129.375] CloseHandle (hObject=0x2d0) returned 1
	[0129.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0129.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp", lpFilePart=0x0) returned 0x2b
	[0129.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0129.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp.rogue", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp.rogue", lpFilePart=0x0) returned 0x31
	[0129.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0129.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\c72hccp4i1_nlz.bmp"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf76975e0, ftCreationTime.dwHighDateTime=0x1d5ef9f, ftLastAccessTime.dwLowDateTime=0xe69b75a0, ftLastAccessTime.dwHighDateTime=0x1d5e442, ftLastWriteTime.dwLowDateTime=0xae5f7ebe, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x8ac0)) returned 1
	[0129.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0129.385] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\c72hccp4i1_nlz.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\C72HcCP4i1_NLz.bmp.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\c72hccp4i1_nlz.bmp.rogue")) returned 1
	[0129.386] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0129.386] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp", lpFilePart=0x0) returned 0x29
	[0129.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.387] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\e5m8utowog9m.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.387] GetFileType (hFile=0x2d0) returned 0x1
	[0129.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.387] GetFileType (hFile=0x2d0) returned 0x1
	[0129.387] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x216a
	[0129.387] ReadFile (in: hFile=0x2d0, lpBuffer=0x2b69c34, nNumberOfBytesToRead=0x216a, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2b69c34*, lpNumberOfBytesRead=0xafe99c*=0x216a, lpOverlapped=0x0) returned 1
	[0129.387] CloseHandle (hObject=0x2d0) returned 1
	[0129.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0129.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0129.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0129.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp", lpFilePart=0x0) returned 0x29
	[0129.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0129.486] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\e5m8utowog9m.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.487] GetFileType (hFile=0x2d0) returned 0x1
	[0129.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0129.488] GetFileType (hFile=0x2d0) returned 0x1
	[0129.488] WriteFile (in: hFile=0x2d0, lpBuffer=0x2983ea4*, nNumberOfBytesToWrite=0x2170, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2983ea4*, lpNumberOfBytesWritten=0xafe990*=0x2170, lpOverlapped=0x0) returned 1
	[0129.489] CloseHandle (hObject=0x2d0) returned 1
	[0129.490] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0129.490] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp", lpFilePart=0x0) returned 0x29
	[0129.491] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30
	[0129.491] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp.rogue", nBufferLength=0x30, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp.rogue", lpFilePart=0x0) returned 0x2f
	[0129.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0129.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\e5m8utowog9m.bmp"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b5fd2f0, ftCreationTime.dwHighDateTime=0x1d5e368, ftLastAccessTime.dwLowDateTime=0xbaf93020, ftLastAccessTime.dwHighDateTime=0x1d5f123, ftLastWriteTime.dwLowDateTime=0xae72921a, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x2170)) returned 1
	[0129.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0129.491] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\e5m8utowog9m.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\E5m8UTowOG9m.bmp.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\e5m8utowog9m.bmp.rogue")) returned 1
	[0129.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0129.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp", lpFilePart=0x0) returned 0x29
	[0129.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.492] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\fak3ewghss21.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.492] GetFileType (hFile=0x2d0) returned 0x1
	[0129.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.492] GetFileType (hFile=0x2d0) returned 0x1
	[0129.492] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x3897
	[0129.492] ReadFile (in: hFile=0x2d0, lpBuffer=0x298627c, nNumberOfBytesToRead=0x3897, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x298627c*, lpNumberOfBytesRead=0xafe99c*=0x3897, lpOverlapped=0x0) returned 1
	[0129.493] CloseHandle (hObject=0x2d0) returned 1
	[0129.518] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.518] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0129.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0129.520] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0129.520] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp", lpFilePart=0x0) returned 0x29
	[0129.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0129.521] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\fak3ewghss21.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.522] GetFileType (hFile=0x2d0) returned 0x1
	[0129.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0129.522] GetFileType (hFile=0x2d0) returned 0x1
	[0129.522] WriteFile (in: hFile=0x2d0, lpBuffer=0x29e4ce4*, nNumberOfBytesToWrite=0x38a0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x29e4ce4*, lpNumberOfBytesWritten=0xafe990*=0x38a0, lpOverlapped=0x0) returned 1
	[0129.523] CloseHandle (hObject=0x2d0) returned 1
	[0129.525] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0129.525] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp", lpFilePart=0x0) returned 0x29
	[0129.525] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30
	[0129.525] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp.rogue", nBufferLength=0x30, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp.rogue", lpFilePart=0x0) returned 0x2f
	[0129.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0129.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\fak3ewghss21.bmp"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e0bb50, ftCreationTime.dwHighDateTime=0x1d5e92a, ftLastAccessTime.dwLowDateTime=0xc65f07e0, ftLastAccessTime.dwHighDateTime=0x1d5f034, ftLastWriteTime.dwLowDateTime=0xae775713, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x38a0)) returned 1
	[0129.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0129.526] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\fak3ewghss21.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\FaK3EWgHsS21.bmp.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\fak3ewghss21.bmp.rogue")) returned 1
	[0129.527] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0129.527] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png", lpFilePart=0x0) returned 0x2e
	[0129.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.527] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png" (normalized: "c:\\users\\fd1hvy\\pictures\\hynxtwelo1_k82gvl.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.527] GetFileType (hFile=0x2d0) returned 0x1
	[0129.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.527] GetFileType (hFile=0x2d0) returned 0x1
	[0129.527] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x91bb
	[0129.528] ReadFile (in: hFile=0x2d0, lpBuffer=0x29e87f4, nNumberOfBytesToRead=0x91bb, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x29e87f4*, lpNumberOfBytesRead=0xafe99c*=0x91bb, lpOverlapped=0x0) returned 1
	[0129.528] CloseHandle (hObject=0x2d0) returned 1
	[0129.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0129.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0129.554] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0129.554] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png", lpFilePart=0x0) returned 0x2e
	[0129.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0129.554] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png" (normalized: "c:\\users\\fd1hvy\\pictures\\hynxtwelo1_k82gvl.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.557] GetFileType (hFile=0x2d0) returned 0x1
	[0129.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0129.557] GetFileType (hFile=0x2d0) returned 0x1
	[0129.557] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a62ea0*, nNumberOfBytesToWrite=0x91c0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a62ea0*, lpNumberOfBytesWritten=0xafe990*=0x91c0, lpOverlapped=0x0) returned 1
	[0129.559] CloseHandle (hObject=0x2d0) returned 1
	[0129.561] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0129.561] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png", lpFilePart=0x0) returned 0x2e
	[0129.561] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0129.561] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png.rogue", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png.rogue", lpFilePart=0x0) returned 0x34
	[0129.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0129.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png" (normalized: "c:\\users\\fd1hvy\\pictures\\hynxtwelo1_k82gvl.png"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9b03d0, ftCreationTime.dwHighDateTime=0x1d5efca, ftLastAccessTime.dwLowDateTime=0xa5515b40, ftLastAccessTime.dwHighDateTime=0x1d5eb6e, ftLastWriteTime.dwLowDateTime=0xae7c1b87, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x91c0)) returned 1
	[0129.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0129.562] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png" (normalized: "c:\\users\\fd1hvy\\pictures\\hynxtwelo1_k82gvl.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\HyNXTweLo1_k82GvL.png.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\hynxtwelo1_k82gvl.png.rogue")) returned 1
	[0129.563] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0129.563] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png", lpFilePart=0x0) returned 0x26
	[0129.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.563] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ifc7jsih2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.563] GetFileType (hFile=0x2d0) returned 0x1
	[0129.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.563] GetFileType (hFile=0x2d0) returned 0x1
	[0129.563] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0xdc11
	[0129.564] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a6c2d4, nNumberOfBytesToRead=0xdc11, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a6c2d4*, lpNumberOfBytesRead=0xafe99c*=0xdc11, lpOverlapped=0x0) returned 1
	[0129.564] CloseHandle (hObject=0x2d0) returned 1
	[0129.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.615] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0129.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0129.615] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0129.615] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png", lpFilePart=0x0) returned 0x26
	[0129.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0129.615] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ifc7jsih2.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.617] GetFileType (hFile=0x2d0) returned 0x1
	[0129.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0129.617] GetFileType (hFile=0x2d0) returned 0x1
	[0129.617] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ae2534*, nNumberOfBytesToWrite=0xdc20, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2ae2534*, lpNumberOfBytesWritten=0xafe990*=0xdc20, lpOverlapped=0x0) returned 1
	[0129.619] CloseHandle (hObject=0x2d0) returned 1
	[0129.622] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0129.622] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png", lpFilePart=0x0) returned 0x26
	[0129.622] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d
	[0129.622] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png.rogue", nBufferLength=0x2d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png.rogue", lpFilePart=0x0) returned 0x2c
	[0129.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0129.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ifc7jsih2.png"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8690c8e0, ftCreationTime.dwHighDateTime=0x1d5e7da, ftLastAccessTime.dwLowDateTime=0x6dac4770, ftLastAccessTime.dwHighDateTime=0x1d5e0e4, ftLastWriteTime.dwLowDateTime=0xae85a4c8, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xdc20)) returned 1
	[0129.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0129.623] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ifc7jsih2.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\Ifc7jSiH2.png.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\ifc7jsih2.png.rogue")) returned 1
	[0129.624] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25
	[0129.624] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png", nBufferLength=0x25, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png", lpFilePart=0x0) returned 0x24
	[0129.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.624] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png" (normalized: "c:\\users\\fd1hvy\\pictures\\j8jg8mu.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.624] GetFileType (hFile=0x2d0) returned 0x1
	[0129.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.624] GetFileType (hFile=0x2d0) returned 0x1
	[0129.624] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0xeead
	[0129.624] ReadFile (in: hFile=0x2d0, lpBuffer=0x2af03a4, nNumberOfBytesToRead=0xeead, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2af03a4*, lpNumberOfBytesRead=0xafe99c*=0xeead, lpOverlapped=0x0) returned 1
	[0129.625] CloseHandle (hObject=0x2d0) returned 1
	[0129.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0129.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0129.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25
	[0129.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png", nBufferLength=0x25, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png", lpFilePart=0x0) returned 0x24
	[0129.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0129.805] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png" (normalized: "c:\\users\\fd1hvy\\pictures\\j8jg8mu.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.807] GetFileType (hFile=0x2d0) returned 0x1
	[0129.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0129.807] GetFileType (hFile=0x2d0) returned 0x1
	[0129.807] WriteFile (in: hFile=0x2d0, lpBuffer=0x2976b30*, nNumberOfBytesToWrite=0xeeb0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2976b30*, lpNumberOfBytesWritten=0xafe990*=0xeeb0, lpOverlapped=0x0) returned 1
	[0129.809] CloseHandle (hObject=0x2d0) returned 1
	[0129.812] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25
	[0129.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png", nBufferLength=0x25, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png", lpFilePart=0x0) returned 0x24
	[0129.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png.rogue", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png.rogue", lpFilePart=0x0) returned 0x2a
	[0129.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0129.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png" (normalized: "c:\\users\\fd1hvy\\pictures\\j8jg8mu.png"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f4960, ftCreationTime.dwHighDateTime=0x1d5ef85, ftLastAccessTime.dwLowDateTime=0x8725f110, ftLastAccessTime.dwHighDateTime=0x1d5ecc9, ftLastWriteTime.dwLowDateTime=0xaea24006, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xeeb0)) returned 1
	[0129.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0129.813] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png" (normalized: "c:\\users\\fd1hvy\\pictures\\j8jg8mu.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\J8jg8mU.png.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\j8jg8mu.png.rogue")) returned 1
	[0129.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp", lpFilePart=0x0) returned 0x2a
	[0129.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.814] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l6i-yofmup-wn.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.814] GetFileType (hFile=0x2d0) returned 0x1
	[0129.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.814] GetFileType (hFile=0x2d0) returned 0x1
	[0129.814] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x127a8
	[0129.814] ReadFile (in: hFile=0x2d0, lpBuffer=0x2985c4c, nNumberOfBytesToRead=0x127a8, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2985c4c*, lpNumberOfBytesRead=0xafe99c*=0x127a8, lpOverlapped=0x0) returned 1
	[0129.816] CloseHandle (hObject=0x2d0) returned 1
	[0129.839] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.839] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0129.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0129.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp", lpFilePart=0x0) returned 0x2a
	[0129.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0129.840] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l6i-yofmup-wn.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.842] GetFileType (hFile=0x2d0) returned 0x1
	[0129.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0129.842] GetFileType (hFile=0x2d0) returned 0x1
	[0129.842] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a0a2b4*, nNumberOfBytesToWrite=0x127b0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a0a2b4*, lpNumberOfBytesWritten=0xafe990*=0x127b0, lpOverlapped=0x0) returned 1
	[0129.844] CloseHandle (hObject=0x2d0) returned 1
	[0129.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp", lpFilePart=0x0) returned 0x2a
	[0129.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0129.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp.rogue", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp.rogue", lpFilePart=0x0) returned 0x30
	[0129.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0129.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l6i-yofmup-wn.bmp"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98341d20, ftCreationTime.dwHighDateTime=0x1d5e697, ftLastAccessTime.dwLowDateTime=0xdc4a7780, ftLastAccessTime.dwHighDateTime=0x1d5f02d, ftLastWriteTime.dwLowDateTime=0xaeabca09, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x127b0)) returned 1
	[0129.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0129.866] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l6i-yofmup-wn.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\l6I-YOfmUp-Wn.bmp.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\l6i-yofmup-wn.bmp.rogue")) returned 1
	[0129.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0129.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp", lpFilePart=0x0) returned 0x23
	[0129.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\lcfjdr.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.868] GetFileType (hFile=0x2d0) returned 0x1
	[0129.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.868] GetFileType (hFile=0x2d0) returned 0x1
	[0129.868] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x4731
	[0129.868] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a1ccc4, nNumberOfBytesToRead=0x4731, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a1ccc4*, lpNumberOfBytesRead=0xafe99c*=0x4731, lpOverlapped=0x0) returned 1
	[0129.868] CloseHandle (hObject=0x2d0) returned 1
	[0129.890] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.890] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0129.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0129.890] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0129.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp", lpFilePart=0x0) returned 0x23
	[0129.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0129.891] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\lcfjdr.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.892] GetFileType (hFile=0x2d0) returned 0x1
	[0129.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0129.892] GetFileType (hFile=0x2d0) returned 0x1
	[0129.892] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a7fef0*, nNumberOfBytesToWrite=0x4740, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a7fef0*, lpNumberOfBytesWritten=0xafe990*=0x4740, lpOverlapped=0x0) returned 1
	[0129.898] CloseHandle (hObject=0x2d0) returned 1
	[0129.900] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0129.900] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp", lpFilePart=0x0) returned 0x23
	[0129.900] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0129.900] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp.rogue", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp.rogue", lpFilePart=0x0) returned 0x29
	[0129.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0129.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\lcfjdr.bmp"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97c4e580, ftCreationTime.dwHighDateTime=0x1d5e724, ftLastAccessTime.dwLowDateTime=0x7e926960, ftLastAccessTime.dwHighDateTime=0x1d5ee4b, ftLastWriteTime.dwLowDateTime=0xaeb08f49, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x4740)) returned 1
	[0129.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0129.900] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\lcfjdr.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\LCFJDR.bmp.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\lcfjdr.bmp.rogue")) returned 1
	[0129.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26
	[0129.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp", nBufferLength=0x26, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp", lpFilePart=0x0) returned 0x25
	[0129.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.901] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\olgo5udj.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.901] GetFileType (hFile=0x2d0) returned 0x1
	[0129.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.901] GetFileType (hFile=0x2d0) returned 0x1
	[0129.901] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x2367
	[0129.901] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a84878, nNumberOfBytesToRead=0x2367, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2a84878*, lpNumberOfBytesRead=0xafe99c*=0x2367, lpOverlapped=0x0) returned 1
	[0129.901] CloseHandle (hObject=0x2d0) returned 1
	[0129.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0129.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0129.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26
	[0129.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp", nBufferLength=0x26, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp", lpFilePart=0x0) returned 0x25
	[0129.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0129.927] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\olgo5udj.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.928] GetFileType (hFile=0x2d0) returned 0x1
	[0129.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0129.928] GetFileType (hFile=0x2d0) returned 0x1
	[0129.929] WriteFile (in: hFile=0x2d0, lpBuffer=0x2adc794*, nNumberOfBytesToWrite=0x2370, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2adc794*, lpNumberOfBytesWritten=0xafe990*=0x2370, lpOverlapped=0x0) returned 1
	[0129.930] CloseHandle (hObject=0x2d0) returned 1
	[0129.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26
	[0129.931] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp", nBufferLength=0x26, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp", lpFilePart=0x0) returned 0x25
	[0129.931] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0129.931] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp.rogue", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp.rogue", lpFilePart=0x0) returned 0x2b
	[0129.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0129.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\olgo5udj.bmp"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8896240, ftCreationTime.dwHighDateTime=0x1d5e50d, ftLastAccessTime.dwLowDateTime=0x22fd6bb0, ftLastAccessTime.dwHighDateTime=0x1d5e28c, ftLastWriteTime.dwLowDateTime=0xaeb55394, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x2370)) returned 1
	[0129.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0129.931] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\olgo5udj.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\olGO5uDJ.bmp.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\olgo5udj.bmp.rogue")) returned 1
	[0129.932] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0129.932] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp", lpFilePart=0x0) returned 0x23
	[0129.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.932] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\sytye6.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.932] GetFileType (hFile=0x2d0) returned 0x1
	[0129.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.932] GetFileType (hFile=0x2d0) returned 0x1
	[0129.932] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x176d1
	[0129.933] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b2db20, nNumberOfBytesToRead=0x176d1, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x3b2db20*, lpNumberOfBytesRead=0xafe99c*=0x176d1, lpOverlapped=0x0) returned 1
	[0129.935] CloseHandle (hObject=0x2d0) returned 1
	[0129.970] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0129.970] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0129.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0129.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0129.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0129.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp", lpFilePart=0x0) returned 0x23
	[0129.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0129.971] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\sytye6.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.973] GetFileType (hFile=0x2d0) returned 0x1
	[0129.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0129.973] GetFileType (hFile=0x2d0) returned 0x1
	[0129.973] WriteFile (in: hFile=0x2d0, lpBuffer=0x3ba2db0*, nNumberOfBytesToWrite=0x176e0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x3ba2db0*, lpNumberOfBytesWritten=0xafe990*=0x176e0, lpOverlapped=0x0) returned 1
	[0129.975] CloseHandle (hObject=0x2d0) returned 1
	[0129.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0129.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp", lpFilePart=0x0) returned 0x23
	[0129.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0129.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp.rogue", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp.rogue", lpFilePart=0x0) returned 0x29
	[0129.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0129.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\sytye6.bmp"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd22ea0, ftCreationTime.dwHighDateTime=0x1d5ef2b, ftLastAccessTime.dwLowDateTime=0xa2db0510, ftLastAccessTime.dwHighDateTime=0x1d5e19f, ftLastWriteTime.dwLowDateTime=0xaebc7ae2, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x176e0)) returned 1
	[0129.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0129.979] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\sytye6.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\Sytye6.bmp.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\sytye6.bmp.rogue")) returned 1
	[0129.979] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0129.979] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg", lpFilePart=0x0) returned 0x29
	[0129.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0129.980] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\uwhinrlpl7zw.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0129.980] GetFileType (hFile=0x2d0) returned 0x1
	[0129.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0129.980] GetFileType (hFile=0x2d0) returned 0x1
	[0129.980] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x14653
	[0129.980] ReadFile (in: hFile=0x2d0, lpBuffer=0x2b2bd9c, nNumberOfBytesToRead=0x14653, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2b2bd9c*, lpNumberOfBytesRead=0xafe99c*=0x14653, lpOverlapped=0x0) returned 1
	[0129.981] CloseHandle (hObject=0x2d0) returned 1
	[0130.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0130.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0130.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0130.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0130.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0130.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg", lpFilePart=0x0) returned 0x29
	[0130.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0130.062] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\uwhinrlpl7zw.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.064] GetFileType (hFile=0x2d0) returned 0x1
	[0130.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0130.064] GetFileType (hFile=0x2d0) returned 0x1
	[0130.064] WriteFile (in: hFile=0x2d0, lpBuffer=0x29bb62c*, nNumberOfBytesToWrite=0x14660, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x29bb62c*, lpNumberOfBytesWritten=0xafe990*=0x14660, lpOverlapped=0x0) returned 1
	[0130.078] CloseHandle (hObject=0x2d0) returned 1
	[0130.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0130.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg", lpFilePart=0x0) returned 0x29
	[0130.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30
	[0130.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg.rogue", nBufferLength=0x30, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg.rogue", lpFilePart=0x0) returned 0x2f
	[0130.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0130.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\uwhinrlpl7zw.jpg"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5a46040, ftCreationTime.dwHighDateTime=0x1d5ee0c, ftLastAccessTime.dwLowDateTime=0xb8991b50, ftLastAccessTime.dwHighDateTime=0x1d5e215, ftLastWriteTime.dwLowDateTime=0xaecd36d0, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x14660)) returned 1
	[0130.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0130.082] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\uwhinrlpl7zw.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\uwhInrLPl7zW.jpg.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\uwhinrlpl7zw.jpg.rogue")) returned 1
	[0130.082] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0130.082] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp", lpFilePart=0x0) returned 0x23
	[0130.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0130.083] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\vvvfqa.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.083] GetFileType (hFile=0x2d0) returned 0x1
	[0130.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0130.083] GetFileType (hFile=0x2d0) returned 0x1
	[0130.083] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0xa7c4
	[0130.083] ReadFile (in: hFile=0x2d0, lpBuffer=0x29cfee8, nNumberOfBytesToRead=0xa7c4, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x29cfee8*, lpNumberOfBytesRead=0xafe99c*=0xa7c4, lpOverlapped=0x0) returned 1
	[0130.083] CloseHandle (hObject=0x2d0) returned 1
	[0130.106] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0130.106] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0130.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0130.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0130.106] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0130.106] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp", lpFilePart=0x0) returned 0x23
	[0130.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0130.106] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\vvvfqa.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.108] GetFileType (hFile=0x2d0) returned 0x1
	[0130.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0130.108] GetFileType (hFile=0x2d0) returned 0x1
	[0130.108] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a3c5b0*, nNumberOfBytesToWrite=0xa7d0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a3c5b0*, lpNumberOfBytesWritten=0xafe990*=0xa7d0, lpOverlapped=0x0) returned 1
	[0130.109] CloseHandle (hObject=0x2d0) returned 1
	[0130.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0130.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp", lpFilePart=0x0) returned 0x23
	[0130.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0130.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp.rogue", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp.rogue", lpFilePart=0x0) returned 0x29
	[0130.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0130.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\vvvfqa.bmp"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec568db0, ftCreationTime.dwHighDateTime=0x1d5e80a, ftLastAccessTime.dwLowDateTime=0x38d56c20, ftLastAccessTime.dwHighDateTime=0x1d5ed82, ftLastWriteTime.dwLowDateTime=0xaed24d3a, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0)) returned 1
	[0130.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0130.123] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\vvvfqa.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\vVVfQa.bmp.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\vvvfqa.bmp.rogue")) returned 1
	[0130.123] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29
	[0130.123] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp", nBufferLength=0x29, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp", lpFilePart=0x0) returned 0x28
	[0130.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0130.124] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\x0snuaxzfke.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.124] GetFileType (hFile=0x2d0) returned 0x1
	[0130.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0130.124] GetFileType (hFile=0x2d0) returned 0x1
	[0130.124] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x18162
	[0130.125] ReadFile (in: hFile=0x2d0, lpBuffer=0x3bf8110, nNumberOfBytesToRead=0x18162, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x3bf8110*, lpNumberOfBytesRead=0xafe99c*=0x18162, lpOverlapped=0x0) returned 1
	[0130.127] CloseHandle (hObject=0x2d0) returned 1
	[0130.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0130.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0130.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0130.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0130.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29
	[0130.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp", nBufferLength=0x29, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp", lpFilePart=0x0) returned 0x28
	[0130.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0130.158] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\x0snuaxzfke.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.167] GetFileType (hFile=0x2d0) returned 0x1
	[0130.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0130.167] GetFileType (hFile=0x2d0) returned 0x1
	[0130.167] WriteFile (in: hFile=0x2d0, lpBuffer=0x3965e30*, nNumberOfBytesToWrite=0x18170, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x3965e30*, lpNumberOfBytesWritten=0xafe990*=0x18170, lpOverlapped=0x0) returned 1
	[0130.169] CloseHandle (hObject=0x2d0) returned 1
	[0130.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29
	[0130.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp", nBufferLength=0x29, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp", lpFilePart=0x0) returned 0x28
	[0130.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0130.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp.rogue", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp.rogue", lpFilePart=0x0) returned 0x2e
	[0130.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0130.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\x0snuaxzfke.bmp"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b525030, ftCreationTime.dwHighDateTime=0x1d5ec1a, ftLastAccessTime.dwLowDateTime=0xc7a59ac0, ftLastAccessTime.dwHighDateTime=0x1d5ebd8, ftLastWriteTime.dwLowDateTime=0xaed916f2, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x18170)) returned 1
	[0130.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0130.173] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\x0snuaxzfke.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\X0SNUaxzFkE.bmp.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\x0snuaxzfke.bmp.rogue")) returned 1
	[0130.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0130.174] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg", lpFilePart=0x0) returned 0x2d
	[0130.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0130.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\zoyqohsz36mwnsz6.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.174] GetFileType (hFile=0x2d0) returned 0x1
	[0130.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0130.174] GetFileType (hFile=0x2d0) returned 0x1
	[0130.174] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x15a50
	[0130.174] ReadFile (in: hFile=0x2d0, lpBuffer=0x397dfc0, nNumberOfBytesToRead=0x15a50, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x397dfc0*, lpNumberOfBytesRead=0xafe99c*=0x15a50, lpOverlapped=0x0) returned 1
	[0130.175] CloseHandle (hObject=0x2d0) returned 1
	[0130.237] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0130.238] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0130.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0130.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0130.238] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0130.238] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg", lpFilePart=0x0) returned 0x2d
	[0130.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0130.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\zoyqohsz36mwnsz6.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.240] GetFileType (hFile=0x2d0) returned 0x1
	[0130.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0130.240] GetFileType (hFile=0x2d0) returned 0x1
	[0130.240] WriteFile (in: hFile=0x2d0, lpBuffer=0x39ea3d0*, nNumberOfBytesToWrite=0x15a60, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x39ea3d0*, lpNumberOfBytesWritten=0xafe990*=0x15a60, lpOverlapped=0x0) returned 1
	[0130.244] CloseHandle (hObject=0x2d0) returned 1
	[0130.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0130.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg", lpFilePart=0x0) returned 0x2d
	[0130.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0130.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg.rogue", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg.rogue", lpFilePart=0x0) returned 0x33
	[0130.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0130.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\zoyqohsz36mwnsz6.jpg"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7719ad90, ftCreationTime.dwHighDateTime=0x1d5f0eb, ftLastAccessTime.dwLowDateTime=0xbc6234d0, ftLastAccessTime.dwHighDateTime=0x1d5ec27, ftLastWriteTime.dwLowDateTime=0xaee502f5, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x15a60)) returned 1
	[0130.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0130.249] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\zoyqohsz36mwnsz6.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\zOYqOHSZ36mWNsz6.jpg.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\zoyqohsz36mwnsz6.jpg.rogue")) returned 1
	[0130.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0130.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25
	[0130.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", nBufferLength=0x25, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x24
	[0130.250] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6668
	[0130.275] FindNextFileW (in: hFindFile=0xdd6668, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.275] FindNextFileW (in: hFindFile=0xdd6668, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0130.276] FindNextFileW (in: hFindFile=0xdd6668, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.276] FindClose (in: hFindFile=0xdd6668 | out: hFindFile=0xdd6668) returned 1
	[0130.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0130.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0130.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0130.276] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25
	[0130.276] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", nBufferLength=0x25, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x24
	[0130.276] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6568
	[0130.276] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.277] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0130.277] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0130.277] FindClose (in: hFindFile=0xdd6568 | out: hFindFile=0xdd6568) returned 1
	[0130.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0130.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0130.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0130.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0130.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa", lpFilePart=0x0) returned 0x23
	[0130.278] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386232f0, ftCreationTime.dwHighDateTime=0x1d5e8d7, ftLastAccessTime.dwLowDateTime=0x118aa20, ftLastAccessTime.dwHighDateTime=0x1d5e212, ftLastWriteTime.dwLowDateTime=0x118aa20, ftLastWriteTime.dwHighDateTime=0x1d5e212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6068
	[0130.278] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386232f0, ftCreationTime.dwHighDateTime=0x1d5e8d7, ftLastAccessTime.dwLowDateTime=0x118aa20, ftLastAccessTime.dwHighDateTime=0x1d5e212, ftLastWriteTime.dwLowDateTime=0x118aa20, ftLastWriteTime.dwHighDateTime=0x1d5e212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.278] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1ca4be0, ftCreationTime.dwHighDateTime=0x1d5e5d2, ftLastAccessTime.dwLowDateTime=0x579865f0, ftLastAccessTime.dwHighDateTime=0x1d5e9b7, ftLastWriteTime.dwLowDateTime=0x579865f0, ftLastWriteTime.dwHighDateTime=0x1d5e9b7, nFileSizeHigh=0x0, nFileSizeLow=0xbc5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="an9qNidTwEL.jpg", cAlternateFileName="AN9QNI~1.JPG")) returned 1
	[0130.278] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d14e300, ftCreationTime.dwHighDateTime=0x1d5efd1, ftLastAccessTime.dwLowDateTime=0x1117f570, ftLastAccessTime.dwHighDateTime=0x1d5e3bb, ftLastWriteTime.dwLowDateTime=0x1117f570, ftLastWriteTime.dwHighDateTime=0x1d5e3bb, nFileSizeHigh=0x0, nFileSizeLow=0x14248, dwReserved0=0x0, dwReserved1=0x0, cFileName="bbBNA931utMEUkHh71-.jpg", cAlternateFileName="BBBNA9~1.JPG")) returned 1
	[0130.279] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf63851c0, ftCreationTime.dwHighDateTime=0x1d5f0c4, ftLastAccessTime.dwLowDateTime=0x331a5e10, ftLastAccessTime.dwHighDateTime=0x1d5ee2e, ftLastWriteTime.dwLowDateTime=0x331a5e10, ftLastWriteTime.dwHighDateTime=0x1d5ee2e, nFileSizeHigh=0x0, nFileSizeLow=0x1524f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CK3NgecyGKGA.png", cAlternateFileName="CK3NGE~1.PNG")) returned 1
	[0130.279] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69ecd870, ftCreationTime.dwHighDateTime=0x1d5e2e7, ftLastAccessTime.dwLowDateTime=0xa08ba4d0, ftLastAccessTime.dwHighDateTime=0x1d5e858, ftLastWriteTime.dwLowDateTime=0xa08ba4d0, ftLastWriteTime.dwHighDateTime=0x1d5e858, nFileSizeHigh=0x0, nFileSizeLow=0xf311, dwReserved0=0x0, dwReserved1=0x0, cFileName="dST4JlJ2NW6GvTWGj.bmp", cAlternateFileName="DST4JL~1.BMP")) returned 1
	[0130.279] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748fd8e0, ftCreationTime.dwHighDateTime=0x1d5ef3f, ftLastAccessTime.dwLowDateTime=0x1a09ccd0, ftLastAccessTime.dwHighDateTime=0x1d5eb18, ftLastWriteTime.dwLowDateTime=0x1a09ccd0, ftLastWriteTime.dwHighDateTime=0x1d5eb18, nFileSizeHigh=0x0, nFileSizeLow=0x40b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="e5E03.jpg", cAlternateFileName="")) returned 1
	[0130.279] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32263760, ftCreationTime.dwHighDateTime=0x1d5ecec, ftLastAccessTime.dwLowDateTime=0x6ce61550, ftLastAccessTime.dwHighDateTime=0x1d5ee9a, ftLastWriteTime.dwLowDateTime=0x6ce61550, ftLastWriteTime.dwHighDateTime=0x1d5ee9a, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="GCkGlbSVY.png", cAlternateFileName="GCKGLB~1.PNG")) returned 1
	[0130.279] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5bf0380, ftCreationTime.dwHighDateTime=0x1d5e108, ftLastAccessTime.dwLowDateTime=0xaaf24980, ftLastAccessTime.dwHighDateTime=0x1d5e54f, ftLastWriteTime.dwLowDateTime=0xaaf24980, ftLastWriteTime.dwHighDateTime=0x1d5e54f, nFileSizeHigh=0x0, nFileSizeLow=0xa86b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IF2DNfbLSv8s5HL.gif", cAlternateFileName="IF2DNF~1.GIF")) returned 1
	[0130.279] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428b0cb0, ftCreationTime.dwHighDateTime=0x1d5efd1, ftLastAccessTime.dwLowDateTime=0x32ec7f0, ftLastAccessTime.dwHighDateTime=0x1d5ea6d, ftLastWriteTime.dwLowDateTime=0x32ec7f0, ftLastWriteTime.dwHighDateTime=0x1d5ea6d, nFileSizeHigh=0x0, nFileSizeLow=0x737e, dwReserved0=0x0, dwReserved1=0x0, cFileName="kNebXWsJ.gif", cAlternateFileName="")) returned 1
	[0130.280] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e6de470, ftCreationTime.dwHighDateTime=0x1d5eeda, ftLastAccessTime.dwLowDateTime=0x28da7190, ftLastAccessTime.dwHighDateTime=0x1d5f042, ftLastWriteTime.dwLowDateTime=0x28da7190, ftLastWriteTime.dwHighDateTime=0x1d5f042, nFileSizeHigh=0x0, nFileSizeLow=0xf33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="QjrHPlHFIjzEFyq Le4.png", cAlternateFileName="QJRHPL~1.PNG")) returned 1
	[0130.280] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe6de70, ftCreationTime.dwHighDateTime=0x1d5e94e, ftLastAccessTime.dwLowDateTime=0x300fcbc0, ftLastAccessTime.dwHighDateTime=0x1d5e810, ftLastWriteTime.dwLowDateTime=0x300fcbc0, ftLastWriteTime.dwHighDateTime=0x1d5e810, nFileSizeHigh=0x0, nFileSizeLow=0x14187, dwReserved0=0x0, dwReserved1=0x0, cFileName="QqhZrM.bmp", cAlternateFileName="")) returned 1
	[0130.280] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb9bf190, ftCreationTime.dwHighDateTime=0x1d5eb09, ftLastAccessTime.dwLowDateTime=0xe230b4b0, ftLastAccessTime.dwHighDateTime=0x1d5e2d2, ftLastWriteTime.dwLowDateTime=0xe230b4b0, ftLastWriteTime.dwHighDateTime=0x1d5e2d2, nFileSizeHigh=0x0, nFileSizeLow=0x1edc, dwReserved0=0x0, dwReserved1=0x0, cFileName="rRlGB.jpg", cAlternateFileName="")) returned 1
	[0130.280] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f698fa0, ftCreationTime.dwHighDateTime=0x1d5e570, ftLastAccessTime.dwLowDateTime=0xf58aa4a0, ftLastAccessTime.dwHighDateTime=0x1d5ec3a, ftLastWriteTime.dwLowDateTime=0xf58aa4a0, ftLastWriteTime.dwHighDateTime=0x1d5ec3a, nFileSizeHigh=0x0, nFileSizeLow=0xb74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZiTawXYVKM.bmp", cAlternateFileName="ZITAWX~1.BMP")) returned 1
	[0130.280] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.280] FindClose (in: hFindFile=0xdd6068 | out: hFindFile=0xdd6068) returned 1
	[0130.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0130.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0130.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0130.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0130.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa", lpFilePart=0x0) returned 0x23
	[0130.281] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386232f0, ftCreationTime.dwHighDateTime=0x1d5e8d7, ftLastAccessTime.dwLowDateTime=0x118aa20, ftLastAccessTime.dwHighDateTime=0x1d5e212, ftLastWriteTime.dwLowDateTime=0x118aa20, ftLastWriteTime.dwHighDateTime=0x1d5e212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6528
	[0130.281] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386232f0, ftCreationTime.dwHighDateTime=0x1d5e8d7, ftLastAccessTime.dwLowDateTime=0x118aa20, ftLastAccessTime.dwHighDateTime=0x1d5e212, ftLastWriteTime.dwLowDateTime=0x118aa20, ftLastWriteTime.dwHighDateTime=0x1d5e212, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.282] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1ca4be0, ftCreationTime.dwHighDateTime=0x1d5e5d2, ftLastAccessTime.dwLowDateTime=0x579865f0, ftLastAccessTime.dwHighDateTime=0x1d5e9b7, ftLastWriteTime.dwLowDateTime=0x579865f0, ftLastWriteTime.dwHighDateTime=0x1d5e9b7, nFileSizeHigh=0x0, nFileSizeLow=0xbc5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="an9qNidTwEL.jpg", cAlternateFileName="AN9QNI~1.JPG")) returned 1
	[0130.282] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d14e300, ftCreationTime.dwHighDateTime=0x1d5efd1, ftLastAccessTime.dwLowDateTime=0x1117f570, ftLastAccessTime.dwHighDateTime=0x1d5e3bb, ftLastWriteTime.dwLowDateTime=0x1117f570, ftLastWriteTime.dwHighDateTime=0x1d5e3bb, nFileSizeHigh=0x0, nFileSizeLow=0x14248, dwReserved0=0x0, dwReserved1=0x0, cFileName="bbBNA931utMEUkHh71-.jpg", cAlternateFileName="BBBNA9~1.JPG")) returned 1
	[0130.282] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf63851c0, ftCreationTime.dwHighDateTime=0x1d5f0c4, ftLastAccessTime.dwLowDateTime=0x331a5e10, ftLastAccessTime.dwHighDateTime=0x1d5ee2e, ftLastWriteTime.dwLowDateTime=0x331a5e10, ftLastWriteTime.dwHighDateTime=0x1d5ee2e, nFileSizeHigh=0x0, nFileSizeLow=0x1524f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CK3NgecyGKGA.png", cAlternateFileName="CK3NGE~1.PNG")) returned 1
	[0130.282] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69ecd870, ftCreationTime.dwHighDateTime=0x1d5e2e7, ftLastAccessTime.dwLowDateTime=0xa08ba4d0, ftLastAccessTime.dwHighDateTime=0x1d5e858, ftLastWriteTime.dwLowDateTime=0xa08ba4d0, ftLastWriteTime.dwHighDateTime=0x1d5e858, nFileSizeHigh=0x0, nFileSizeLow=0xf311, dwReserved0=0x0, dwReserved1=0x0, cFileName="dST4JlJ2NW6GvTWGj.bmp", cAlternateFileName="DST4JL~1.BMP")) returned 1
	[0130.283] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748fd8e0, ftCreationTime.dwHighDateTime=0x1d5ef3f, ftLastAccessTime.dwLowDateTime=0x1a09ccd0, ftLastAccessTime.dwHighDateTime=0x1d5eb18, ftLastWriteTime.dwLowDateTime=0x1a09ccd0, ftLastWriteTime.dwHighDateTime=0x1d5eb18, nFileSizeHigh=0x0, nFileSizeLow=0x40b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="e5E03.jpg", cAlternateFileName="")) returned 1
	[0130.283] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32263760, ftCreationTime.dwHighDateTime=0x1d5ecec, ftLastAccessTime.dwLowDateTime=0x6ce61550, ftLastAccessTime.dwHighDateTime=0x1d5ee9a, ftLastWriteTime.dwLowDateTime=0x6ce61550, ftLastWriteTime.dwHighDateTime=0x1d5ee9a, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="GCkGlbSVY.png", cAlternateFileName="GCKGLB~1.PNG")) returned 1
	[0130.283] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5bf0380, ftCreationTime.dwHighDateTime=0x1d5e108, ftLastAccessTime.dwLowDateTime=0xaaf24980, ftLastAccessTime.dwHighDateTime=0x1d5e54f, ftLastWriteTime.dwLowDateTime=0xaaf24980, ftLastWriteTime.dwHighDateTime=0x1d5e54f, nFileSizeHigh=0x0, nFileSizeLow=0xa86b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IF2DNfbLSv8s5HL.gif", cAlternateFileName="IF2DNF~1.GIF")) returned 1
	[0130.283] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428b0cb0, ftCreationTime.dwHighDateTime=0x1d5efd1, ftLastAccessTime.dwLowDateTime=0x32ec7f0, ftLastAccessTime.dwHighDateTime=0x1d5ea6d, ftLastWriteTime.dwLowDateTime=0x32ec7f0, ftLastWriteTime.dwHighDateTime=0x1d5ea6d, nFileSizeHigh=0x0, nFileSizeLow=0x737e, dwReserved0=0x0, dwReserved1=0x0, cFileName="kNebXWsJ.gif", cAlternateFileName="")) returned 1
	[0130.287] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e6de470, ftCreationTime.dwHighDateTime=0x1d5eeda, ftLastAccessTime.dwLowDateTime=0x28da7190, ftLastAccessTime.dwHighDateTime=0x1d5f042, ftLastWriteTime.dwLowDateTime=0x28da7190, ftLastWriteTime.dwHighDateTime=0x1d5f042, nFileSizeHigh=0x0, nFileSizeLow=0xf33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="QjrHPlHFIjzEFyq Le4.png", cAlternateFileName="QJRHPL~1.PNG")) returned 1
	[0130.287] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe6de70, ftCreationTime.dwHighDateTime=0x1d5e94e, ftLastAccessTime.dwLowDateTime=0x300fcbc0, ftLastAccessTime.dwHighDateTime=0x1d5e810, ftLastWriteTime.dwLowDateTime=0x300fcbc0, ftLastWriteTime.dwHighDateTime=0x1d5e810, nFileSizeHigh=0x0, nFileSizeLow=0x14187, dwReserved0=0x0, dwReserved1=0x0, cFileName="QqhZrM.bmp", cAlternateFileName="")) returned 1
	[0130.287] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb9bf190, ftCreationTime.dwHighDateTime=0x1d5eb09, ftLastAccessTime.dwLowDateTime=0xe230b4b0, ftLastAccessTime.dwHighDateTime=0x1d5e2d2, ftLastWriteTime.dwLowDateTime=0xe230b4b0, ftLastWriteTime.dwHighDateTime=0x1d5e2d2, nFileSizeHigh=0x0, nFileSizeLow=0x1edc, dwReserved0=0x0, dwReserved1=0x0, cFileName="rRlGB.jpg", cAlternateFileName="")) returned 1
	[0130.288] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f698fa0, ftCreationTime.dwHighDateTime=0x1d5e570, ftLastAccessTime.dwLowDateTime=0xf58aa4a0, ftLastAccessTime.dwHighDateTime=0x1d5ec3a, ftLastWriteTime.dwLowDateTime=0xf58aa4a0, ftLastWriteTime.dwHighDateTime=0x1d5ec3a, nFileSizeHigh=0x0, nFileSizeLow=0xb74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZiTawXYVKM.bmp", cAlternateFileName="ZITAWX~1.BMP")) returned 1
	[0130.288] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f698fa0, ftCreationTime.dwHighDateTime=0x1d5e570, ftLastAccessTime.dwLowDateTime=0xf58aa4a0, ftLastAccessTime.dwHighDateTime=0x1d5ec3a, ftLastWriteTime.dwLowDateTime=0xf58aa4a0, ftLastWriteTime.dwHighDateTime=0x1d5ec3a, nFileSizeHigh=0x0, nFileSizeLow=0xb74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZiTawXYVKM.bmp", cAlternateFileName="ZITAWX~1.BMP")) returned 0
	[0130.288] FindClose (in: hFindFile=0xdd6528 | out: hFindFile=0xdd6528) returned 1
	[0130.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0130.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0130.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0130.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg", lpFilePart=0x0) returned 0x33
	[0130.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0130.289] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\an9qnidtwel.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.289] GetFileType (hFile=0x2d0) returned 0x1
	[0130.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0130.289] GetFileType (hFile=0x2d0) returned 0x1
	[0130.289] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0xbc5b
	[0130.289] ReadFile (in: hFile=0x2d0, lpBuffer=0x294ebc0, nNumberOfBytesToRead=0xbc5b, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x294ebc0*, lpNumberOfBytesRead=0xafe928*=0xbc5b, lpOverlapped=0x0) returned 1
	[0130.290] CloseHandle (hObject=0x2d0) returned 1
	[0130.323] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0130.323] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0130.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0130.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0130.323] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0130.323] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg", lpFilePart=0x0) returned 0x33
	[0130.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0130.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\an9qnidtwel.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.325] GetFileType (hFile=0x2d0) returned 0x1
	[0130.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0130.325] GetFileType (hFile=0x2d0) returned 0x1
	[0130.325] WriteFile (in: hFile=0x2d0, lpBuffer=0x29beee0*, nNumberOfBytesToWrite=0xbc60, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x29beee0*, lpNumberOfBytesWritten=0xafe91c*=0xbc60, lpOverlapped=0x0) returned 1
	[0130.327] CloseHandle (hObject=0x2d0) returned 1
	[0130.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0130.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg", lpFilePart=0x0) returned 0x33
	[0130.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0130.330] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg.rogue", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg.rogue", lpFilePart=0x0) returned 0x39
	[0130.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0130.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\an9qnidtwel.jpg"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1ca4be0, ftCreationTime.dwHighDateTime=0x1d5e5d2, ftLastAccessTime.dwLowDateTime=0x579865f0, ftLastAccessTime.dwHighDateTime=0x1d5e9b7, ftLastWriteTime.dwLowDateTime=0xaef0eed7, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xbc60)) returned 1
	[0130.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0130.330] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\an9qnidtwel.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\an9qNidTwEL.jpg.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\an9qnidtwel.jpg.rogue")) returned 1
	[0130.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c
	[0130.332] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg", nBufferLength=0x3c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg", lpFilePart=0x0) returned 0x3b
	[0130.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0130.332] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\bbbna931utmeukhh71-.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.332] GetFileType (hFile=0x2d0) returned 0x1
	[0130.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0130.332] GetFileType (hFile=0x2d0) returned 0x1
	[0130.332] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x14248
	[0130.332] ReadFile (in: hFile=0x2d0, lpBuffer=0x29cadc4, nNumberOfBytesToRead=0x14248, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x29cadc4*, lpNumberOfBytesRead=0xafe928*=0x14248, lpOverlapped=0x0) returned 1
	[0130.333] CloseHandle (hObject=0x2d0) returned 1
	[0130.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0130.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0130.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0130.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0130.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c
	[0130.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg", nBufferLength=0x3c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg", lpFilePart=0x0) returned 0x3b
	[0130.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0130.363] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\bbbna931utmeukhh71-.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.365] GetFileType (hFile=0x2d0) returned 0x1
	[0130.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0130.366] GetFileType (hFile=0x2d0) returned 0x1
	[0130.366] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a542b0*, nNumberOfBytesToWrite=0x14250, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2a542b0*, lpNumberOfBytesWritten=0xafe91c*=0x14250, lpOverlapped=0x0) returned 1
	[0130.368] CloseHandle (hObject=0x2d0) returned 1
	[0130.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c
	[0130.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg", nBufferLength=0x3c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg", lpFilePart=0x0) returned 0x3b
	[0130.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42
	[0130.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg.rogue", nBufferLength=0x42, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg.rogue", lpFilePart=0x0) returned 0x41
	[0130.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0130.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\bbbna931utmeukhh71-.jpg"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d14e300, ftCreationTime.dwHighDateTime=0x1d5efd1, ftLastAccessTime.dwLowDateTime=0x1117f570, ftLastAccessTime.dwHighDateTime=0x1d5e3bb, ftLastWriteTime.dwLowDateTime=0xaef816db, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x14250)) returned 1
	[0130.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0130.375] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\bbbna931utmeukhh71-.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\bbBNA931utMEUkHh71-.jpg.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\bbbna931utmeukhh71-.jpg.rogue")) returned 1
	[0130.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0130.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png", lpFilePart=0x0) returned 0x34
	[0130.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0130.376] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\ck3ngecygkga.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.376] GetFileType (hFile=0x2d0) returned 0x1
	[0130.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0130.376] GetFileType (hFile=0x2d0) returned 0x1
	[0130.376] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x1524f
	[0130.378] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a3fbb0, nNumberOfBytesToRead=0x1524f, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x3a3fbb0*, lpNumberOfBytesRead=0xafe928*=0x1524f, lpOverlapped=0x0) returned 1
	[0130.379] CloseHandle (hObject=0x2d0) returned 1
	[0130.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0130.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0130.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0130.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0130.417] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0130.417] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png", lpFilePart=0x0) returned 0x34
	[0130.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0130.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\ck3ngecygkga.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.420] GetFileType (hFile=0x2d0) returned 0x1
	[0130.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0130.420] GetFileType (hFile=0x2d0) returned 0x1
	[0130.420] WriteFile (in: hFile=0x2d0, lpBuffer=0x3aa9780*, nNumberOfBytesToWrite=0x15250, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x3aa9780*, lpNumberOfBytesWritten=0xafe91c*=0x15250, lpOverlapped=0x0) returned 1
	[0130.423] CloseHandle (hObject=0x2d0) returned 1
	[0130.426] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0130.426] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png", lpFilePart=0x0) returned 0x34
	[0130.426] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b
	[0130.426] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png.rogue", nBufferLength=0x3b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png.rogue", lpFilePart=0x0) returned 0x3a
	[0130.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0130.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\ck3ngecygkga.png"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf63851c0, ftCreationTime.dwHighDateTime=0x1d5f0c4, ftLastAccessTime.dwLowDateTime=0x331a5e10, ftLastAccessTime.dwHighDateTime=0x1d5ee2e, ftLastWriteTime.dwLowDateTime=0xaf019f2a, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x15250)) returned 1
	[0130.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0130.427] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\ck3ngecygkga.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\CK3NgecyGKGA.png.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\ck3ngecygkga.png.rogue")) returned 1
	[0130.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0130.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp", lpFilePart=0x0) returned 0x39
	[0130.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0130.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\dst4jlj2nw6gvtwgj.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.428] GetFileType (hFile=0x2d0) returned 0x1
	[0130.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0130.428] GetFileType (hFile=0x2d0) returned 0x1
	[0130.428] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0xf311
	[0130.428] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ab5810, nNumberOfBytesToRead=0xf311, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2ab5810*, lpNumberOfBytesRead=0xafe928*=0xf311, lpOverlapped=0x0) returned 1
	[0130.429] CloseHandle (hObject=0x2d0) returned 1
	[0130.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0130.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0130.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0130.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0130.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0130.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp", lpFilePart=0x0) returned 0x39
	[0130.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0130.545] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\dst4jlj2nw6gvtwgj.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.547] GetFileType (hFile=0x2d0) returned 0x1
	[0130.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0130.547] GetFileType (hFile=0x2d0) returned 0x1
	[0130.547] WriteFile (in: hFile=0x2d0, lpBuffer=0x293ffe0*, nNumberOfBytesToWrite=0xf320, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x293ffe0*, lpNumberOfBytesWritten=0xafe91c*=0xf320, lpOverlapped=0x0) returned 1
	[0130.550] CloseHandle (hObject=0x2d0) returned 1
	[0130.552] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0130.552] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp", lpFilePart=0x0) returned 0x39
	[0130.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40
	[0130.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp.rogue", nBufferLength=0x40, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp.rogue", lpFilePart=0x0) returned 0x3f
	[0130.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0130.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\dst4jlj2nw6gvtwgj.bmp"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69ecd870, ftCreationTime.dwHighDateTime=0x1d5e2e7, ftLastAccessTime.dwLowDateTime=0xa08ba4d0, ftLastAccessTime.dwHighDateTime=0x1d5e858, ftLastWriteTime.dwLowDateTime=0xaf14b206, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xf320)) returned 1
	[0130.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0130.553] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\dst4jlj2nw6gvtwgj.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\dST4JlJ2NW6GvTWGj.bmp.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\dst4jlj2nw6gvtwgj.bmp.rogue")) returned 1
	[0130.554] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0130.554] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg", lpFilePart=0x0) returned 0x2d
	[0130.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0130.554] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\e5e03.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.554] GetFileType (hFile=0x2d0) returned 0x1
	[0130.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0130.554] GetFileType (hFile=0x2d0) returned 0x1
	[0130.554] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x40b1
	[0130.554] ReadFile (in: hFile=0x2d0, lpBuffer=0x294f580, nNumberOfBytesToRead=0x40b1, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x294f580*, lpNumberOfBytesRead=0xafe928*=0x40b1, lpOverlapped=0x0) returned 1
	[0130.555] CloseHandle (hObject=0x2d0) returned 1
	[0130.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0130.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0130.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0130.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0130.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0130.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg", lpFilePart=0x0) returned 0x2d
	[0130.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0130.620] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\e5e03.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.622] GetFileType (hFile=0x2d0) returned 0x1
	[0130.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0130.622] GetFileType (hFile=0x2d0) returned 0x1
	[0130.622] WriteFile (in: hFile=0x2d0, lpBuffer=0x29b0888*, nNumberOfBytesToWrite=0x40c0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x29b0888*, lpNumberOfBytesWritten=0xafe91c*=0x40c0, lpOverlapped=0x0) returned 1
	[0130.624] CloseHandle (hObject=0x2d0) returned 1
	[0130.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0130.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg", lpFilePart=0x0) returned 0x2d
	[0130.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0130.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg.rogue", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg.rogue", lpFilePart=0x0) returned 0x33
	[0130.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0130.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\e5e03.jpg"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748fd8e0, ftCreationTime.dwHighDateTime=0x1d5ef3f, ftLastAccessTime.dwLowDateTime=0x1a09ccd0, ftLastAccessTime.dwHighDateTime=0x1d5eb18, ftLastWriteTime.dwLowDateTime=0xaf1e3f1b, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x40c0)) returned 1
	[0130.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0130.626] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\e5e03.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\e5E03.jpg.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\e5e03.jpg.rogue")) returned 1
	[0130.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0130.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png", lpFilePart=0x0) returned 0x31
	[0130.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0130.627] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\gckglbsvy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.627] GetFileType (hFile=0x2d0) returned 0x1
	[0130.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0130.627] GetFileType (hFile=0x2d0) returned 0x1
	[0130.627] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x1485
	[0130.627] ReadFile (in: hFile=0x2d0, lpBuffer=0x29b4ba0, nNumberOfBytesToRead=0x1485, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x29b4ba0*, lpNumberOfBytesRead=0xafe928*=0x1485, lpOverlapped=0x0) returned 1
	[0130.628] CloseHandle (hObject=0x2d0) returned 1
	[0130.656] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0130.656] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0130.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0130.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0130.656] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0130.656] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png", lpFilePart=0x0) returned 0x31
	[0130.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0130.657] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\gckglbsvy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.658] GetFileType (hFile=0x2d0) returned 0x1
	[0130.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0130.658] GetFileType (hFile=0x2d0) returned 0x1
	[0130.658] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a0805c*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2a0805c*, lpNumberOfBytesWritten=0xafe91c*=0x1490, lpOverlapped=0x0) returned 1
	[0130.660] CloseHandle (hObject=0x2d0) returned 1
	[0130.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0130.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png", lpFilePart=0x0) returned 0x31
	[0130.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38
	[0130.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png.rogue", nBufferLength=0x38, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png.rogue", lpFilePart=0x0) returned 0x37
	[0130.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0130.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\gckglbsvy.png"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32263760, ftCreationTime.dwHighDateTime=0x1d5ecec, ftLastAccessTime.dwLowDateTime=0x6ce61550, ftLastAccessTime.dwHighDateTime=0x1d5ee9a, ftLastWriteTime.dwLowDateTime=0xaf256388, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x1490)) returned 1
	[0130.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0130.662] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\gckglbsvy.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\GCkGlbSVY.png.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\gckglbsvy.png.rogue")) returned 1
	[0130.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c
	[0130.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png", nBufferLength=0x3c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png", lpFilePart=0x0) returned 0x3b
	[0130.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0130.664] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\qjrhplhfijzefyq le4.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.664] GetFileType (hFile=0x2d0) returned 0x1
	[0130.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0130.664] GetFileType (hFile=0x2d0) returned 0x1
	[0130.664] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0xf33a
	[0130.664] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a09798, nNumberOfBytesToRead=0xf33a, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2a09798*, lpNumberOfBytesRead=0xafe928*=0xf33a, lpOverlapped=0x0) returned 1
	[0130.665] CloseHandle (hObject=0x2d0) returned 1
	[0130.705] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0130.705] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0130.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0130.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0130.706] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c
	[0130.706] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png", nBufferLength=0x3c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png", lpFilePart=0x0) returned 0x3b
	[0130.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0130.707] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\qjrhplhfijzefyq le4.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.708] GetFileType (hFile=0x2d0) returned 0x1
	[0130.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0130.709] GetFileType (hFile=0x2d0) returned 0x1
	[0130.709] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a83f58*, nNumberOfBytesToWrite=0xf340, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2a83f58*, lpNumberOfBytesWritten=0xafe91c*=0xf340, lpOverlapped=0x0) returned 1
	[0130.710] CloseHandle (hObject=0x2d0) returned 1
	[0130.713] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c
	[0130.713] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png", nBufferLength=0x3c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png", lpFilePart=0x0) returned 0x3b
	[0130.713] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42
	[0130.714] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png.rogue", nBufferLength=0x42, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png.rogue", lpFilePart=0x0) returned 0x41
	[0130.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0130.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\qjrhplhfijzefyq le4.png"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e6de470, ftCreationTime.dwHighDateTime=0x1d5eeda, ftLastAccessTime.dwLowDateTime=0x28da7190, ftLastAccessTime.dwHighDateTime=0x1d5f042, ftLastWriteTime.dwLowDateTime=0xaf2c8a4f, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xf340)) returned 1
	[0130.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0130.714] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\qjrhplhfijzefyq le4.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QjrHPlHFIjzEFyq Le4.png.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\qjrhplhfijzefyq le4.png.rogue")) returned 1
	[0130.715] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0130.715] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp", lpFilePart=0x0) returned 0x2e
	[0130.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0130.715] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\qqhzrm.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.715] GetFileType (hFile=0x2d0) returned 0x1
	[0130.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0130.715] GetFileType (hFile=0x2d0) returned 0x1
	[0130.715] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x14187
	[0130.716] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a93524, nNumberOfBytesToRead=0x14187, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2a93524*, lpNumberOfBytesRead=0xafe928*=0x14187, lpOverlapped=0x0) returned 1
	[0130.716] CloseHandle (hObject=0x2d0) returned 1
	[0130.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0130.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0130.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0130.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0130.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0130.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp", lpFilePart=0x0) returned 0x2e
	[0130.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0130.792] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\qqhzrm.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.794] GetFileType (hFile=0x2d0) returned 0x1
	[0130.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0130.794] GetFileType (hFile=0x2d0) returned 0x1
	[0130.794] WriteFile (in: hFile=0x2d0, lpBuffer=0x292288c*, nNumberOfBytesToWrite=0x14190, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x292288c*, lpNumberOfBytesWritten=0xafe91c*=0x14190, lpOverlapped=0x0) returned 1
	[0130.796] CloseHandle (hObject=0x2d0) returned 1
	[0130.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f
	[0130.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp", nBufferLength=0x2f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp", lpFilePart=0x0) returned 0x2e
	[0130.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0130.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp.rogue", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp.rogue", lpFilePart=0x0) returned 0x34
	[0130.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0130.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\qqhzrm.bmp"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe6de70, ftCreationTime.dwHighDateTime=0x1d5e94e, ftLastAccessTime.dwLowDateTime=0x300fcbc0, ftLastAccessTime.dwHighDateTime=0x1d5e810, ftLastWriteTime.dwLowDateTime=0xaf3b8488, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x14190)) returned 1
	[0130.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0130.805] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\qqhzrm.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\QqhZrM.bmp.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\qqhzrm.bmp.rogue")) returned 1
	[0130.806] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0130.806] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg", lpFilePart=0x0) returned 0x2d
	[0130.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0130.807] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\rrlgb.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.807] GetFileType (hFile=0x2d0) returned 0x1
	[0130.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0130.807] GetFileType (hFile=0x2d0) returned 0x1
	[0130.807] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x1edc
	[0130.807] ReadFile (in: hFile=0x2d0, lpBuffer=0x2936c74, nNumberOfBytesToRead=0x1edc, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2936c74*, lpNumberOfBytesRead=0xafe928*=0x1edc, lpOverlapped=0x0) returned 1
	[0130.807] CloseHandle (hObject=0x2d0) returned 1
	[0130.845] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0130.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0130.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0130.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0130.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0130.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg", lpFilePart=0x0) returned 0x2d
	[0130.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0130.847] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\rrlgb.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.848] GetFileType (hFile=0x2d0) returned 0x1
	[0130.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0130.848] GetFileType (hFile=0x2d0) returned 0x1
	[0130.848] WriteFile (in: hFile=0x2d0, lpBuffer=0x298d618*, nNumberOfBytesToWrite=0x1ee0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x298d618*, lpNumberOfBytesWritten=0xafe91c*=0x1ee0, lpOverlapped=0x0) returned 1
	[0130.849] CloseHandle (hObject=0x2d0) returned 1
	[0130.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0130.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg", lpFilePart=0x0) returned 0x2d
	[0130.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0130.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg.rogue", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg.rogue", lpFilePart=0x0) returned 0x33
	[0130.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0130.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\rrlgb.jpg"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb9bf190, ftCreationTime.dwHighDateTime=0x1d5eb09, ftLastAccessTime.dwLowDateTime=0xe230b4b0, ftLastAccessTime.dwHighDateTime=0x1d5e2d2, ftLastWriteTime.dwLowDateTime=0xaf41fcf5, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x1ee0)) returned 1
	[0130.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0130.856] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\rrlgb.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\rRlGB.jpg.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\rrlgb.jpg.rogue")) returned 1
	[0130.857] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33
	[0130.857] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp", nBufferLength=0x33, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp", lpFilePart=0x0) returned 0x32
	[0130.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0130.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\zitawxyvkm.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.857] GetFileType (hFile=0x2d0) returned 0x1
	[0130.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0130.857] GetFileType (hFile=0x2d0) returned 0x1
	[0130.857] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0xb74b
	[0130.858] ReadFile (in: hFile=0x2d0, lpBuffer=0x298f754, nNumberOfBytesToRead=0xb74b, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x298f754*, lpNumberOfBytesRead=0xafe928*=0xb74b, lpOverlapped=0x0) returned 1
	[0130.858] CloseHandle (hObject=0x2d0) returned 1
	[0130.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0130.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0130.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0130.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0130.893] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33
	[0130.893] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp", nBufferLength=0x33, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp", lpFilePart=0x0) returned 0x32
	[0130.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0130.893] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\zitawxyvkm.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.897] GetFileType (hFile=0x2d0) returned 0x1
	[0130.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0130.897] GetFileType (hFile=0x2d0) returned 0x1
	[0130.897] WriteFile (in: hFile=0x2d0, lpBuffer=0x29feb44*, nNumberOfBytesToWrite=0xb750, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x29feb44*, lpNumberOfBytesWritten=0xafe91c*=0xb750, lpOverlapped=0x0) returned 1
	[0130.899] CloseHandle (hObject=0x2d0) returned 1
	[0130.902] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33
	[0130.902] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp", nBufferLength=0x33, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp", lpFilePart=0x0) returned 0x32
	[0130.902] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39
	[0130.902] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp.rogue", nBufferLength=0x39, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp.rogue", lpFilePart=0x0) returned 0x38
	[0130.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0130.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\zitawxyvkm.bmp"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f698fa0, ftCreationTime.dwHighDateTime=0x1d5e570, ftLastAccessTime.dwLowDateTime=0xf58aa4a0, ftLastAccessTime.dwHighDateTime=0x1d5ec3a, ftLastWriteTime.dwLowDateTime=0xaf492cf4, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xb750)) returned 1
	[0130.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0130.902] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\zitawxyvkm.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\jq0y3iIsZa\\ZiTawXYVKM.bmp.rogue" (normalized: "c:\\users\\fd1hvy\\pictures\\jq0y3iisza\\zitawxyvkm.bmp.rogue")) returned 1
	[0130.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0130.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0130.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x27
	[0130.904] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd65a8
	[0130.907] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.907] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0130.907] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.907] FindClose (in: hFindFile=0xdd65a8 | out: hFindFile=0xdd65a8) returned 1
	[0130.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0130.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0130.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0130.908] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0130.908] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x27
	[0130.908] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd67e8
	[0130.908] FindNextFileW (in: hFindFile=0xdd67e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.908] FindNextFileW (in: hFindFile=0xdd67e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0130.911] FindNextFileW (in: hFindFile=0xdd67e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0130.912] FindClose (in: hFindFile=0xdd67e8 | out: hFindFile=0xdd67e8) returned 1
	[0130.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0130.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0130.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0130.912] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x16
	[0130.912] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music", nBufferLength=0x16, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music", lpFilePart=0x0) returned 0x15
	[0130.912] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec3e59a2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec3e59a2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6668
	[0130.912] FindNextFileW (in: hFindFile=0xdd6668, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec3e59a2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec3e59a2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.913] FindNextFileW (in: hFindFile=0xdd6668, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe40c5af0, ftCreationTime.dwHighDateTime=0x1d5e200, ftLastAccessTime.dwLowDateTime=0x70472df0, ftLastAccessTime.dwHighDateTime=0x1d5e784, ftLastWriteTime.dwLowDateTime=0x70472df0, ftLastWriteTime.dwHighDateTime=0x1d5e784, nFileSizeHigh=0x0, nFileSizeLow=0x1575e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CVkG.m4a", cAlternateFileName="")) returned 1
	[0130.913] FindNextFileW (in: hFindFile=0xdd6668, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0130.913] FindNextFileW (in: hFindFile=0xdd6668, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b49a00, ftCreationTime.dwHighDateTime=0x1d5e3e9, ftLastAccessTime.dwLowDateTime=0x7bf4a680, ftLastAccessTime.dwHighDateTime=0x1d5e718, ftLastWriteTime.dwLowDateTime=0x7bf4a680, ftLastWriteTime.dwHighDateTime=0x1d5e718, nFileSizeHigh=0x0, nFileSizeLow=0xfcde, dwReserved0=0x0, dwReserved1=0x0, cFileName="IYrvtd.m4a", cAlternateFileName="")) returned 1
	[0130.913] FindNextFileW (in: hFindFile=0xdd6668, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8437c0, ftCreationTime.dwHighDateTime=0x1d5e17e, ftLastAccessTime.dwLowDateTime=0x539c4b00, ftLastAccessTime.dwHighDateTime=0x1d5e968, ftLastWriteTime.dwLowDateTime=0x539c4b00, ftLastWriteTime.dwHighDateTime=0x1d5e968, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NxUKdOUgrEDWs", cAlternateFileName="NXUKDO~1")) returned 1
	[0130.913] FindNextFileW (in: hFindFile=0xdd6668, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8437c0, ftCreationTime.dwHighDateTime=0x1d5e17e, ftLastAccessTime.dwLowDateTime=0x539c4b00, ftLastAccessTime.dwHighDateTime=0x1d5e968, ftLastWriteTime.dwLowDateTime=0x539c4b00, ftLastWriteTime.dwHighDateTime=0x1d5e968, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NxUKdOUgrEDWs", cAlternateFileName="NXUKDO~1")) returned 0
	[0130.914] FindClose (in: hFindFile=0xdd6668 | out: hFindFile=0xdd6668) returned 1
	[0130.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0130.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0130.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0130.914] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x16
	[0130.914] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music", nBufferLength=0x16, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music", lpFilePart=0x0) returned 0x15
	[0130.914] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec3e59a2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec3e59a2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd60e8
	[0130.914] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec3e59a2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec3e59a2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.915] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe40c5af0, ftCreationTime.dwHighDateTime=0x1d5e200, ftLastAccessTime.dwLowDateTime=0x70472df0, ftLastAccessTime.dwHighDateTime=0x1d5e784, ftLastWriteTime.dwLowDateTime=0x70472df0, ftLastWriteTime.dwHighDateTime=0x1d5e784, nFileSizeHigh=0x0, nFileSizeLow=0x1575e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CVkG.m4a", cAlternateFileName="")) returned 1
	[0130.915] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0130.915] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b49a00, ftCreationTime.dwHighDateTime=0x1d5e3e9, ftLastAccessTime.dwLowDateTime=0x7bf4a680, ftLastAccessTime.dwHighDateTime=0x1d5e718, ftLastWriteTime.dwLowDateTime=0x7bf4a680, ftLastWriteTime.dwHighDateTime=0x1d5e718, nFileSizeHigh=0x0, nFileSizeLow=0xfcde, dwReserved0=0x0, dwReserved1=0x0, cFileName="IYrvtd.m4a", cAlternateFileName="")) returned 1
	[0130.915] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8437c0, ftCreationTime.dwHighDateTime=0x1d5e17e, ftLastAccessTime.dwLowDateTime=0x539c4b00, ftLastAccessTime.dwHighDateTime=0x1d5e968, ftLastWriteTime.dwLowDateTime=0x539c4b00, ftLastWriteTime.dwHighDateTime=0x1d5e968, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NxUKdOUgrEDWs", cAlternateFileName="NXUKDO~1")) returned 1
	[0130.915] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.915] FindClose (in: hFindFile=0xdd60e8 | out: hFindFile=0xdd60e8) returned 1
	[0130.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0130.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0130.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0130.916] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0130.916] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs", lpFilePart=0x0) returned 0x23
	[0130.916] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8437c0, ftCreationTime.dwHighDateTime=0x1d5e17e, ftLastAccessTime.dwLowDateTime=0x539c4b00, ftLastAccessTime.dwHighDateTime=0x1d5e968, ftLastWriteTime.dwLowDateTime=0x539c4b00, ftLastWriteTime.dwHighDateTime=0x1d5e968, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd65a8
	[0130.916] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8437c0, ftCreationTime.dwHighDateTime=0x1d5e17e, ftLastAccessTime.dwLowDateTime=0x539c4b00, ftLastAccessTime.dwHighDateTime=0x1d5e968, ftLastWriteTime.dwLowDateTime=0x539c4b00, ftLastWriteTime.dwHighDateTime=0x1d5e968, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.917] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99a1600, ftCreationTime.dwHighDateTime=0x1d5e499, ftLastAccessTime.dwLowDateTime=0xdfad1130, ftLastAccessTime.dwHighDateTime=0x1d5e3fd, ftLastWriteTime.dwLowDateTime=0xdfad1130, ftLastWriteTime.dwHighDateTime=0x1d5e3fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Uz3l9WqC", cAlternateFileName="0UZ3L9~1")) returned 1
	[0130.917] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3f56b0, ftCreationTime.dwHighDateTime=0x1d5e956, ftLastAccessTime.dwLowDateTime=0x9fc96290, ftLastAccessTime.dwHighDateTime=0x1d5e4b0, ftLastWriteTime.dwLowDateTime=0x9fc96290, ftLastWriteTime.dwHighDateTime=0x1d5e4b0, nFileSizeHigh=0x0, nFileSizeLow=0x61e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="6mj_qf9AxT8i.mp3", cAlternateFileName="6MJ_QF~1.MP3")) returned 1
	[0130.917] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdafcc6e0, ftCreationTime.dwHighDateTime=0x1d5ef32, ftLastAccessTime.dwLowDateTime=0x3ebd2fa0, ftLastAccessTime.dwHighDateTime=0x1d5e3fb, ftLastWriteTime.dwLowDateTime=0x3ebd2fa0, ftLastWriteTime.dwHighDateTime=0x1d5e3fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bOBiR", cAlternateFileName="")) returned 1
	[0130.917] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb756fc00, ftCreationTime.dwHighDateTime=0x1d5f087, ftLastAccessTime.dwLowDateTime=0x252183b0, ftLastAccessTime.dwHighDateTime=0x1d5e159, ftLastWriteTime.dwLowDateTime=0x252183b0, ftLastWriteTime.dwHighDateTime=0x1d5e159, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIS0knz", cAlternateFileName="")) returned 1
	[0130.917] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9a576c0, ftCreationTime.dwHighDateTime=0x1d5ebbb, ftLastAccessTime.dwLowDateTime=0x94792ad0, ftLastAccessTime.dwHighDateTime=0x1d5ee54, ftLastWriteTime.dwLowDateTime=0x94792ad0, ftLastWriteTime.dwHighDateTime=0x1d5ee54, nFileSizeHigh=0x0, nFileSizeLow=0x3f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="DJkscs1SouzDwt.wav", cAlternateFileName="DJKSCS~1.WAV")) returned 1
	[0130.918] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e097c0, ftCreationTime.dwHighDateTime=0x1d5e162, ftLastAccessTime.dwLowDateTime=0x9a1e1840, ftLastAccessTime.dwHighDateTime=0x1d5efaa, ftLastWriteTime.dwLowDateTime=0x9a1e1840, ftLastWriteTime.dwHighDateTime=0x1d5efaa, nFileSizeHigh=0x0, nFileSizeLow=0xd2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="ex1t6THx6V1FdjO5WQq.m4a", cAlternateFileName="EX1T6T~1.M4A")) returned 1
	[0130.918] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4e4960, ftCreationTime.dwHighDateTime=0x1d5e45a, ftLastAccessTime.dwLowDateTime=0xa060f30, ftLastAccessTime.dwHighDateTime=0x1d5e391, ftLastWriteTime.dwLowDateTime=0xa060f30, ftLastWriteTime.dwHighDateTime=0x1d5e391, nFileSizeHigh=0x0, nFileSizeLow=0xaa5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="N0NeMC.m4a", cAlternateFileName="")) returned 1
	[0130.918] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b60340, ftCreationTime.dwHighDateTime=0x1d5eb09, ftLastAccessTime.dwLowDateTime=0x15ce05b0, ftLastAccessTime.dwHighDateTime=0x1d5e577, ftLastWriteTime.dwLowDateTime=0x15ce05b0, ftLastWriteTime.dwHighDateTime=0x1d5e577, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="o WZ46b_33Wp6bFh", cAlternateFileName="OWZ46B~1")) returned 1
	[0130.918] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b60340, ftCreationTime.dwHighDateTime=0x1d5eb09, ftLastAccessTime.dwLowDateTime=0x15ce05b0, ftLastAccessTime.dwHighDateTime=0x1d5e577, ftLastWriteTime.dwLowDateTime=0x15ce05b0, ftLastWriteTime.dwHighDateTime=0x1d5e577, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="o WZ46b_33Wp6bFh", cAlternateFileName="OWZ46B~1")) returned 0
	[0130.918] FindClose (in: hFindFile=0xdd65a8 | out: hFindFile=0xdd65a8) returned 1
	[0130.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0130.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0130.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0130.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0130.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs", lpFilePart=0x0) returned 0x23
	[0130.919] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8437c0, ftCreationTime.dwHighDateTime=0x1d5e17e, ftLastAccessTime.dwLowDateTime=0x539c4b00, ftLastAccessTime.dwHighDateTime=0x1d5e968, ftLastWriteTime.dwLowDateTime=0x539c4b00, ftLastWriteTime.dwHighDateTime=0x1d5e968, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd63a8
	[0130.919] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8437c0, ftCreationTime.dwHighDateTime=0x1d5e17e, ftLastAccessTime.dwLowDateTime=0x539c4b00, ftLastAccessTime.dwHighDateTime=0x1d5e968, ftLastWriteTime.dwLowDateTime=0x539c4b00, ftLastWriteTime.dwHighDateTime=0x1d5e968, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.919] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99a1600, ftCreationTime.dwHighDateTime=0x1d5e499, ftLastAccessTime.dwLowDateTime=0xdfad1130, ftLastAccessTime.dwHighDateTime=0x1d5e3fd, ftLastWriteTime.dwLowDateTime=0xdfad1130, ftLastWriteTime.dwHighDateTime=0x1d5e3fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Uz3l9WqC", cAlternateFileName="0UZ3L9~1")) returned 1
	[0130.920] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3f56b0, ftCreationTime.dwHighDateTime=0x1d5e956, ftLastAccessTime.dwLowDateTime=0x9fc96290, ftLastAccessTime.dwHighDateTime=0x1d5e4b0, ftLastWriteTime.dwLowDateTime=0x9fc96290, ftLastWriteTime.dwHighDateTime=0x1d5e4b0, nFileSizeHigh=0x0, nFileSizeLow=0x61e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="6mj_qf9AxT8i.mp3", cAlternateFileName="6MJ_QF~1.MP3")) returned 1
	[0130.920] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdafcc6e0, ftCreationTime.dwHighDateTime=0x1d5ef32, ftLastAccessTime.dwLowDateTime=0x3ebd2fa0, ftLastAccessTime.dwHighDateTime=0x1d5e3fb, ftLastWriteTime.dwLowDateTime=0x3ebd2fa0, ftLastWriteTime.dwHighDateTime=0x1d5e3fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bOBiR", cAlternateFileName="")) returned 1
	[0130.920] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb756fc00, ftCreationTime.dwHighDateTime=0x1d5f087, ftLastAccessTime.dwLowDateTime=0x252183b0, ftLastAccessTime.dwHighDateTime=0x1d5e159, ftLastWriteTime.dwLowDateTime=0x252183b0, ftLastWriteTime.dwHighDateTime=0x1d5e159, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIS0knz", cAlternateFileName="")) returned 1
	[0130.920] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9a576c0, ftCreationTime.dwHighDateTime=0x1d5ebbb, ftLastAccessTime.dwLowDateTime=0x94792ad0, ftLastAccessTime.dwHighDateTime=0x1d5ee54, ftLastWriteTime.dwLowDateTime=0x94792ad0, ftLastWriteTime.dwHighDateTime=0x1d5ee54, nFileSizeHigh=0x0, nFileSizeLow=0x3f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="DJkscs1SouzDwt.wav", cAlternateFileName="DJKSCS~1.WAV")) returned 1
	[0130.920] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e097c0, ftCreationTime.dwHighDateTime=0x1d5e162, ftLastAccessTime.dwLowDateTime=0x9a1e1840, ftLastAccessTime.dwHighDateTime=0x1d5efaa, ftLastWriteTime.dwLowDateTime=0x9a1e1840, ftLastWriteTime.dwHighDateTime=0x1d5efaa, nFileSizeHigh=0x0, nFileSizeLow=0xd2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="ex1t6THx6V1FdjO5WQq.m4a", cAlternateFileName="EX1T6T~1.M4A")) returned 1
	[0130.921] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4e4960, ftCreationTime.dwHighDateTime=0x1d5e45a, ftLastAccessTime.dwLowDateTime=0xa060f30, ftLastAccessTime.dwHighDateTime=0x1d5e391, ftLastWriteTime.dwLowDateTime=0xa060f30, ftLastWriteTime.dwHighDateTime=0x1d5e391, nFileSizeHigh=0x0, nFileSizeLow=0xaa5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="N0NeMC.m4a", cAlternateFileName="")) returned 1
	[0130.921] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b60340, ftCreationTime.dwHighDateTime=0x1d5eb09, ftLastAccessTime.dwLowDateTime=0x15ce05b0, ftLastAccessTime.dwHighDateTime=0x1d5e577, ftLastWriteTime.dwLowDateTime=0x15ce05b0, ftLastWriteTime.dwHighDateTime=0x1d5e577, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="o WZ46b_33Wp6bFh", cAlternateFileName="OWZ46B~1")) returned 1
	[0130.921] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.921] FindClose (in: hFindFile=0xdd63a8 | out: hFindFile=0xdd63a8) returned 1
	[0130.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0130.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0130.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0130.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3", lpFilePart=0x0) returned 0x34
	[0130.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0130.922] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\6mj_qf9axt8i.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0130.922] GetFileType (hFile=0x2d0) returned 0x1
	[0130.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0130.922] GetFileType (hFile=0x2d0) returned 0x1
	[0130.922] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x61e5
	[0130.922] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a0e4b8, nNumberOfBytesToRead=0x61e5, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2a0e4b8*, lpNumberOfBytesRead=0xafe928*=0x61e5, lpOverlapped=0x0) returned 1
	[0130.923] CloseHandle (hObject=0x2d0) returned 1
	[0131.012] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.012] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0131.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0131.013] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0131.013] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3", lpFilePart=0x0) returned 0x34
	[0131.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0131.013] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\6mj_qf9axt8i.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.015] GetFileType (hFile=0x2d0) returned 0x1
	[0131.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0131.015] GetFileType (hFile=0x2d0) returned 0x1
	[0131.015] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a79c54*, nNumberOfBytesToWrite=0x61f0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2a79c54*, lpNumberOfBytesWritten=0xafe91c*=0x61f0, lpOverlapped=0x0) returned 1
	[0131.016] CloseHandle (hObject=0x2d0) returned 1
	[0131.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0131.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3", lpFilePart=0x0) returned 0x34
	[0131.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b
	[0131.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3.rogue", nBufferLength=0x3b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3.rogue", lpFilePart=0x0) returned 0x3a
	[0131.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0131.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\6mj_qf9axt8i.mp3"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3f56b0, ftCreationTime.dwHighDateTime=0x1d5e956, ftLastAccessTime.dwLowDateTime=0x9fc96290, ftLastAccessTime.dwHighDateTime=0x1d5e4b0, ftLastWriteTime.dwLowDateTime=0xaf5c3d7a, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x61f0)) returned 1
	[0131.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0131.024] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\6mj_qf9axt8i.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\6mj_qf9AxT8i.mp3.rogue" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\6mj_qf9axt8i.mp3.rogue")) returned 1
	[0131.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0131.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0131.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC", lpFilePart=0x0) returned 0x2d
	[0131.026] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99a1600, ftCreationTime.dwHighDateTime=0x1d5e499, ftLastAccessTime.dwLowDateTime=0xdfad1130, ftLastAccessTime.dwHighDateTime=0x1d5e3fd, ftLastWriteTime.dwLowDateTime=0xdfad1130, ftLastWriteTime.dwHighDateTime=0x1d5e3fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd65a8
	[0131.026] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99a1600, ftCreationTime.dwHighDateTime=0x1d5e499, ftLastAccessTime.dwLowDateTime=0xdfad1130, ftLastAccessTime.dwHighDateTime=0x1d5e3fd, ftLastWriteTime.dwLowDateTime=0xdfad1130, ftLastWriteTime.dwHighDateTime=0x1d5e3fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.026] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dc33c0, ftCreationTime.dwHighDateTime=0x1d5eac0, ftLastAccessTime.dwLowDateTime=0xd45f0ea0, ftLastAccessTime.dwHighDateTime=0x1d5e907, ftLastWriteTime.dwLowDateTime=0xd45f0ea0, ftLastWriteTime.dwHighDateTime=0x1d5e907, nFileSizeHigh=0x0, nFileSizeLow=0xed08, dwReserved0=0x0, dwReserved1=0x0, cFileName="4jArfR.mp3", cAlternateFileName="")) returned 1
	[0131.026] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a5d8010, ftCreationTime.dwHighDateTime=0x1d5ea58, ftLastAccessTime.dwLowDateTime=0xa6a30320, ftLastAccessTime.dwHighDateTime=0x1d5ec1f, ftLastWriteTime.dwLowDateTime=0xa6a30320, ftLastWriteTime.dwHighDateTime=0x1d5ec1f, nFileSizeHigh=0x0, nFileSizeLow=0x11bb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J4k58b0GnV9RV.m4a", cAlternateFileName="J4K58B~1.M4A")) returned 1
	[0131.027] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e976360, ftCreationTime.dwHighDateTime=0x1d5e63e, ftLastAccessTime.dwLowDateTime=0x503d7620, ftLastAccessTime.dwHighDateTime=0x1d5ebb9, ftLastWriteTime.dwLowDateTime=0x503d7620, ftLastWriteTime.dwHighDateTime=0x1d5ebb9, nFileSizeHigh=0x0, nFileSizeLow=0x5053, dwReserved0=0x0, dwReserved1=0x0, cFileName="man6 ne1Meiw3CVkotQ.wav", cAlternateFileName="MAN6NE~1.WAV")) returned 1
	[0131.027] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a34900, ftCreationTime.dwHighDateTime=0x1d5e6d0, ftLastAccessTime.dwLowDateTime=0x95dc95a0, ftLastAccessTime.dwHighDateTime=0x1d5ead6, ftLastWriteTime.dwLowDateTime=0x95dc95a0, ftLastWriteTime.dwHighDateTime=0x1d5ead6, nFileSizeHigh=0x0, nFileSizeLow=0xedfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="oJtyMFGSxc0.wav", cAlternateFileName="OJTYMF~1.WAV")) returned 1
	[0131.027] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfda0a60, ftCreationTime.dwHighDateTime=0x1d5e9ec, ftLastAccessTime.dwLowDateTime=0xf0738550, ftLastAccessTime.dwHighDateTime=0x1d5e23e, ftLastWriteTime.dwLowDateTime=0xf0738550, ftLastWriteTime.dwHighDateTime=0x1d5e23e, nFileSizeHigh=0x0, nFileSizeLow=0x16349, dwReserved0=0x0, dwReserved1=0x0, cFileName="WR94IrSJ CVoCS9i.m4a", cAlternateFileName="WR94IR~1.M4A")) returned 1
	[0131.027] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.027] FindClose (in: hFindFile=0xdd65a8 | out: hFindFile=0xdd65a8) returned 1
	[0131.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0131.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0131.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0131.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0131.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC", lpFilePart=0x0) returned 0x2d
	[0131.028] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99a1600, ftCreationTime.dwHighDateTime=0x1d5e499, ftLastAccessTime.dwLowDateTime=0xdfad1130, ftLastAccessTime.dwHighDateTime=0x1d5e3fd, ftLastWriteTime.dwLowDateTime=0xdfad1130, ftLastWriteTime.dwHighDateTime=0x1d5e3fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd61a8
	[0131.028] FindNextFileW (in: hFindFile=0xdd61a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99a1600, ftCreationTime.dwHighDateTime=0x1d5e499, ftLastAccessTime.dwLowDateTime=0xdfad1130, ftLastAccessTime.dwHighDateTime=0x1d5e3fd, ftLastWriteTime.dwLowDateTime=0xdfad1130, ftLastWriteTime.dwHighDateTime=0x1d5e3fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.028] FindNextFileW (in: hFindFile=0xdd61a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dc33c0, ftCreationTime.dwHighDateTime=0x1d5eac0, ftLastAccessTime.dwLowDateTime=0xd45f0ea0, ftLastAccessTime.dwHighDateTime=0x1d5e907, ftLastWriteTime.dwLowDateTime=0xd45f0ea0, ftLastWriteTime.dwHighDateTime=0x1d5e907, nFileSizeHigh=0x0, nFileSizeLow=0xed08, dwReserved0=0x0, dwReserved1=0x0, cFileName="4jArfR.mp3", cAlternateFileName="")) returned 1
	[0131.029] FindNextFileW (in: hFindFile=0xdd61a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a5d8010, ftCreationTime.dwHighDateTime=0x1d5ea58, ftLastAccessTime.dwLowDateTime=0xa6a30320, ftLastAccessTime.dwHighDateTime=0x1d5ec1f, ftLastWriteTime.dwLowDateTime=0xa6a30320, ftLastWriteTime.dwHighDateTime=0x1d5ec1f, nFileSizeHigh=0x0, nFileSizeLow=0x11bb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J4k58b0GnV9RV.m4a", cAlternateFileName="J4K58B~1.M4A")) returned 1
	[0131.029] FindNextFileW (in: hFindFile=0xdd61a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e976360, ftCreationTime.dwHighDateTime=0x1d5e63e, ftLastAccessTime.dwLowDateTime=0x503d7620, ftLastAccessTime.dwHighDateTime=0x1d5ebb9, ftLastWriteTime.dwLowDateTime=0x503d7620, ftLastWriteTime.dwHighDateTime=0x1d5ebb9, nFileSizeHigh=0x0, nFileSizeLow=0x5053, dwReserved0=0x0, dwReserved1=0x0, cFileName="man6 ne1Meiw3CVkotQ.wav", cAlternateFileName="MAN6NE~1.WAV")) returned 1
	[0131.029] FindNextFileW (in: hFindFile=0xdd61a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a34900, ftCreationTime.dwHighDateTime=0x1d5e6d0, ftLastAccessTime.dwLowDateTime=0x95dc95a0, ftLastAccessTime.dwHighDateTime=0x1d5ead6, ftLastWriteTime.dwLowDateTime=0x95dc95a0, ftLastWriteTime.dwHighDateTime=0x1d5ead6, nFileSizeHigh=0x0, nFileSizeLow=0xedfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="oJtyMFGSxc0.wav", cAlternateFileName="OJTYMF~1.WAV")) returned 1
	[0131.029] FindNextFileW (in: hFindFile=0xdd61a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfda0a60, ftCreationTime.dwHighDateTime=0x1d5e9ec, ftLastAccessTime.dwLowDateTime=0xf0738550, ftLastAccessTime.dwHighDateTime=0x1d5e23e, ftLastWriteTime.dwLowDateTime=0xf0738550, ftLastWriteTime.dwHighDateTime=0x1d5e23e, nFileSizeHigh=0x0, nFileSizeLow=0x16349, dwReserved0=0x0, dwReserved1=0x0, cFileName="WR94IrSJ CVoCS9i.m4a", cAlternateFileName="WR94IR~1.M4A")) returned 1
	[0131.029] FindNextFileW (in: hFindFile=0xdd61a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfda0a60, ftCreationTime.dwHighDateTime=0x1d5e9ec, ftLastAccessTime.dwLowDateTime=0xf0738550, ftLastAccessTime.dwHighDateTime=0x1d5e23e, ftLastWriteTime.dwLowDateTime=0xf0738550, ftLastWriteTime.dwHighDateTime=0x1d5e23e, nFileSizeHigh=0x0, nFileSizeLow=0x16349, dwReserved0=0x0, dwReserved1=0x0, cFileName="WR94IrSJ CVoCS9i.m4a", cAlternateFileName="WR94IR~1.M4A")) returned 0
	[0131.030] FindClose (in: hFindFile=0xdd61a8 | out: hFindFile=0xdd61a8) returned 1
	[0131.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0131.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0131.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39
	[0131.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3", nBufferLength=0x39, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3", lpFilePart=0x0) returned 0x38
	[0131.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0131.030] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\0uz3l9wqc\\4jarfr.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.030] GetFileType (hFile=0x2d0) returned 0x1
	[0131.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0131.030] GetFileType (hFile=0x2d0) returned 0x1
	[0131.030] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0xed08
	[0131.031] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a81dc4, nNumberOfBytesToRead=0xed08, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x2a81dc4*, lpNumberOfBytesRead=0xafe8b4*=0xed08, lpOverlapped=0x0) returned 1
	[0131.032] CloseHandle (hObject=0x2d0) returned 1
	[0131.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0131.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0131.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39
	[0131.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3", nBufferLength=0x39, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3", lpFilePart=0x0) returned 0x38
	[0131.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0131.059] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\0uz3l9wqc\\4jarfr.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.060] GetFileType (hFile=0x2d0) returned 0x1
	[0131.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0131.060] GetFileType (hFile=0x2d0) returned 0x1
	[0131.061] WriteFile (in: hFile=0x2d0, lpBuffer=0x2afb2f0*, nNumberOfBytesToWrite=0xed10, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x2afb2f0*, lpNumberOfBytesWritten=0xafe8a8*=0xed10, lpOverlapped=0x0) returned 1
	[0131.063] CloseHandle (hObject=0x2d0) returned 1
	[0131.070] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39
	[0131.070] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3", nBufferLength=0x39, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3", lpFilePart=0x0) returned 0x38
	[0131.070] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0131.071] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3.rogue", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3.rogue", lpFilePart=0x0) returned 0x3e
	[0131.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0131.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\0uz3l9wqc\\4jarfr.mp3"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dc33c0, ftCreationTime.dwHighDateTime=0x1d5eac0, ftLastAccessTime.dwLowDateTime=0xd45f0ea0, ftLastAccessTime.dwHighDateTime=0x1d5e907, ftLastWriteTime.dwLowDateTime=0xaf63721e, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xed10)) returned 1
	[0131.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0131.071] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\0uz3l9wqc\\4jarfr.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\0Uz3l9WqC\\4jArfR.mp3.rogue" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\0uz3l9wqc\\4jarfr.mp3.rogue")) returned 1
	[0131.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0131.072] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0131.072] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR", lpFilePart=0x0) returned 0x29
	[0131.072] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdafcc6e0, ftCreationTime.dwHighDateTime=0x1d5ef32, ftLastAccessTime.dwLowDateTime=0x3ebd2fa0, ftLastAccessTime.dwHighDateTime=0x1d5e3fb, ftLastWriteTime.dwLowDateTime=0x3ebd2fa0, ftLastWriteTime.dwHighDateTime=0x1d5e3fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd64a8
	[0131.072] FindNextFileW (in: hFindFile=0xdd64a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdafcc6e0, ftCreationTime.dwHighDateTime=0x1d5ef32, ftLastAccessTime.dwLowDateTime=0x3ebd2fa0, ftLastAccessTime.dwHighDateTime=0x1d5e3fb, ftLastWriteTime.dwLowDateTime=0x3ebd2fa0, ftLastWriteTime.dwHighDateTime=0x1d5e3fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.072] FindNextFileW (in: hFindFile=0xdd64a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x413c85f0, ftCreationTime.dwHighDateTime=0x1d5eaea, ftLastAccessTime.dwLowDateTime=0x5cd62ce0, ftLastAccessTime.dwHighDateTime=0x1d5ebac, ftLastWriteTime.dwLowDateTime=0x5cd62ce0, ftLastWriteTime.dwHighDateTime=0x1d5ebac, nFileSizeHigh=0x0, nFileSizeLow=0xe815, dwReserved0=0x0, dwReserved1=0x0, cFileName="K3G3Nenm2LT.wav", cAlternateFileName="K3G3NE~1.WAV")) returned 1
	[0131.072] FindNextFileW (in: hFindFile=0xdd64a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf176460, ftCreationTime.dwHighDateTime=0x1d5ec14, ftLastAccessTime.dwLowDateTime=0xdfd02580, ftLastAccessTime.dwHighDateTime=0x1d5ec40, ftLastWriteTime.dwLowDateTime=0xdfd02580, ftLastWriteTime.dwHighDateTime=0x1d5ec40, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="up1TUjeC6Pk", cAlternateFileName="UP1TUJ~1")) returned 1
	[0131.073] FindNextFileW (in: hFindFile=0xdd64a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b997020, ftCreationTime.dwHighDateTime=0x1d5e68e, ftLastAccessTime.dwLowDateTime=0xd8910100, ftLastAccessTime.dwHighDateTime=0x1d5e28f, ftLastWriteTime.dwLowDateTime=0xd8910100, ftLastWriteTime.dwHighDateTime=0x1d5e28f, nFileSizeHigh=0x0, nFileSizeLow=0x3744, dwReserved0=0x0, dwReserved1=0x0, cFileName="vXUfkOfl8yLRueRb.mp3", cAlternateFileName="VXUFKO~1.MP3")) returned 1
	[0131.073] FindNextFileW (in: hFindFile=0xdd64a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.073] FindClose (in: hFindFile=0xdd64a8 | out: hFindFile=0xdd64a8) returned 1
	[0131.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0131.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0131.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0131.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a
	[0131.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR", nBufferLength=0x2a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR", lpFilePart=0x0) returned 0x29
	[0131.073] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdafcc6e0, ftCreationTime.dwHighDateTime=0x1d5ef32, ftLastAccessTime.dwLowDateTime=0x3ebd2fa0, ftLastAccessTime.dwHighDateTime=0x1d5e3fb, ftLastWriteTime.dwLowDateTime=0x3ebd2fa0, ftLastWriteTime.dwHighDateTime=0x1d5e3fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6168
	[0131.073] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdafcc6e0, ftCreationTime.dwHighDateTime=0x1d5ef32, ftLastAccessTime.dwLowDateTime=0x3ebd2fa0, ftLastAccessTime.dwHighDateTime=0x1d5e3fb, ftLastWriteTime.dwLowDateTime=0x3ebd2fa0, ftLastWriteTime.dwHighDateTime=0x1d5e3fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.074] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x413c85f0, ftCreationTime.dwHighDateTime=0x1d5eaea, ftLastAccessTime.dwLowDateTime=0x5cd62ce0, ftLastAccessTime.dwHighDateTime=0x1d5ebac, ftLastWriteTime.dwLowDateTime=0x5cd62ce0, ftLastWriteTime.dwHighDateTime=0x1d5ebac, nFileSizeHigh=0x0, nFileSizeLow=0xe815, dwReserved0=0x0, dwReserved1=0x0, cFileName="K3G3Nenm2LT.wav", cAlternateFileName="K3G3NE~1.WAV")) returned 1
	[0131.074] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf176460, ftCreationTime.dwHighDateTime=0x1d5ec14, ftLastAccessTime.dwLowDateTime=0xdfd02580, ftLastAccessTime.dwHighDateTime=0x1d5ec40, ftLastWriteTime.dwLowDateTime=0xdfd02580, ftLastWriteTime.dwHighDateTime=0x1d5ec40, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="up1TUjeC6Pk", cAlternateFileName="UP1TUJ~1")) returned 1
	[0131.074] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b997020, ftCreationTime.dwHighDateTime=0x1d5e68e, ftLastAccessTime.dwLowDateTime=0xd8910100, ftLastAccessTime.dwHighDateTime=0x1d5e28f, ftLastWriteTime.dwLowDateTime=0xd8910100, ftLastWriteTime.dwHighDateTime=0x1d5e28f, nFileSizeHigh=0x0, nFileSizeLow=0x3744, dwReserved0=0x0, dwReserved1=0x0, cFileName="vXUfkOfl8yLRueRb.mp3", cAlternateFileName="VXUFKO~1.MP3")) returned 1
	[0131.074] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b997020, ftCreationTime.dwHighDateTime=0x1d5e68e, ftLastAccessTime.dwLowDateTime=0xd8910100, ftLastAccessTime.dwHighDateTime=0x1d5e28f, ftLastWriteTime.dwLowDateTime=0xd8910100, ftLastWriteTime.dwHighDateTime=0x1d5e28f, nFileSizeHigh=0x0, nFileSizeLow=0x3744, dwReserved0=0x0, dwReserved1=0x0, cFileName="vXUfkOfl8yLRueRb.mp3", cAlternateFileName="VXUFKO~1.MP3")) returned 0
	[0131.075] FindClose (in: hFindFile=0xdd6168 | out: hFindFile=0xdd6168) returned 1
	[0131.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0131.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0131.075] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0131.075] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3", lpFilePart=0x0) returned 0x3e
	[0131.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0131.075] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\bobir\\vxufkofl8ylruerb.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.075] GetFileType (hFile=0x2d0) returned 0x1
	[0131.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0131.075] GetFileType (hFile=0x2d0) returned 0x1
	[0131.075] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0x3744
	[0131.075] ReadFile (in: hFile=0x2d0, lpBuffer=0x2b0b828, nNumberOfBytesToRead=0x3744, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x2b0b828*, lpNumberOfBytesRead=0xafe8b4*=0x3744, lpOverlapped=0x0) returned 1
	[0131.077] CloseHandle (hObject=0x2d0) returned 1
	[0131.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0131.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0131.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0131.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3", lpFilePart=0x0) returned 0x3e
	[0131.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0131.167] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\bobir\\vxufkofl8ylruerb.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.169] GetFileType (hFile=0x2d0) returned 0x1
	[0131.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0131.169] GetFileType (hFile=0x2d0) returned 0x1
	[0131.169] WriteFile (in: hFile=0x2d0, lpBuffer=0x296e24c*, nNumberOfBytesToWrite=0x3750, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x296e24c*, lpNumberOfBytesWritten=0xafe8a8*=0x3750, lpOverlapped=0x0) returned 1
	[0131.170] CloseHandle (hObject=0x2d0) returned 1
	[0131.198] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0131.198] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3", lpFilePart=0x0) returned 0x3e
	[0131.198] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45
	[0131.198] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3.rogue", nBufferLength=0x45, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3.rogue", lpFilePart=0x0) returned 0x44
	[0131.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0131.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\bobir\\vxufkofl8ylruerb.mp3"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b997020, ftCreationTime.dwHighDateTime=0x1d5e68e, ftLastAccessTime.dwLowDateTime=0xd8910100, ftLastAccessTime.dwHighDateTime=0x1d5e28f, ftLastWriteTime.dwLowDateTime=0xaf7671d5, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x3750)) returned 1
	[0131.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0131.198] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\bobir\\vxufkofl8ylruerb.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\vXUfkOfl8yLRueRb.mp3.rogue" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\bobir\\vxufkofl8ylruerb.mp3.rogue")) returned 1
	[0131.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8ec) returned 1
	[0131.199] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\up1TUjeC6Pk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0131.199] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\up1TUjeC6Pk", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\up1TUjeC6Pk", lpFilePart=0x0) returned 0x35
	[0131.199] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\up1TUjeC6Pk\\*", lpFindFileData=0xafe614 | out: lpFindFileData=0xafe614*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf176460, ftCreationTime.dwHighDateTime=0x1d5ec14, ftLastAccessTime.dwLowDateTime=0xdfd02580, ftLastAccessTime.dwHighDateTime=0x1d5ec40, ftLastWriteTime.dwLowDateTime=0xdfd02580, ftLastWriteTime.dwHighDateTime=0x1d5ec40, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd60e8
	[0131.200] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf176460, ftCreationTime.dwHighDateTime=0x1d5ec14, ftLastAccessTime.dwLowDateTime=0xdfd02580, ftLastAccessTime.dwHighDateTime=0x1d5ec40, ftLastWriteTime.dwLowDateTime=0xdfd02580, ftLastWriteTime.dwHighDateTime=0x1d5ec40, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.200] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fbb0a30, ftCreationTime.dwHighDateTime=0x1d5ecf3, ftLastAccessTime.dwLowDateTime=0x9dd5eb90, ftLastAccessTime.dwHighDateTime=0x1d5ecf6, ftLastWriteTime.dwLowDateTime=0x9dd5eb90, ftLastWriteTime.dwHighDateTime=0x1d5ecf6, nFileSizeHigh=0x0, nFileSizeLow=0xa9c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELapVfsDsO4Obv1.m4a", cAlternateFileName="ELAPVF~1.M4A")) returned 1
	[0131.200] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7133a30, ftCreationTime.dwHighDateTime=0x1d5efb4, ftLastAccessTime.dwLowDateTime=0xaeb14d60, ftLastAccessTime.dwHighDateTime=0x1d5e6fc, ftLastWriteTime.dwLowDateTime=0xaeb14d60, ftLastWriteTime.dwHighDateTime=0x1d5e6fc, nFileSizeHigh=0x0, nFileSizeLow=0xc80d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3Sfqf.m4a", cAlternateFileName="")) returned 1
	[0131.201] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6f540, ftCreationTime.dwHighDateTime=0x1d5e932, ftLastAccessTime.dwLowDateTime=0xe82a0da0, ftLastAccessTime.dwHighDateTime=0x1d5e6ef, ftLastWriteTime.dwLowDateTime=0xe82a0da0, ftLastWriteTime.dwHighDateTime=0x1d5e6ef, nFileSizeHigh=0x0, nFileSizeLow=0x468c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PKl6.wav", cAlternateFileName="")) returned 1
	[0131.201] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.201] FindClose (in: hFindFile=0xdd60e8 | out: hFindFile=0xdd60e8) returned 1
	[0131.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8a8) returned 1
	[0131.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8b4) returned 1
	[0131.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8ec) returned 1
	[0131.202] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\up1TUjeC6Pk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0131.202] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\up1TUjeC6Pk", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\up1TUjeC6Pk", lpFilePart=0x0) returned 0x35
	[0131.202] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\bOBiR\\up1TUjeC6Pk\\*", lpFindFileData=0xafe614 | out: lpFindFileData=0xafe614*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf176460, ftCreationTime.dwHighDateTime=0x1d5ec14, ftLastAccessTime.dwLowDateTime=0xdfd02580, ftLastAccessTime.dwHighDateTime=0x1d5ec40, ftLastWriteTime.dwLowDateTime=0xdfd02580, ftLastWriteTime.dwHighDateTime=0x1d5ec40, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd64e8
	[0131.202] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf176460, ftCreationTime.dwHighDateTime=0x1d5ec14, ftLastAccessTime.dwLowDateTime=0xdfd02580, ftLastAccessTime.dwHighDateTime=0x1d5ec40, ftLastWriteTime.dwLowDateTime=0xdfd02580, ftLastWriteTime.dwHighDateTime=0x1d5ec40, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.202] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fbb0a30, ftCreationTime.dwHighDateTime=0x1d5ecf3, ftLastAccessTime.dwLowDateTime=0x9dd5eb90, ftLastAccessTime.dwHighDateTime=0x1d5ecf6, ftLastWriteTime.dwLowDateTime=0x9dd5eb90, ftLastWriteTime.dwHighDateTime=0x1d5ecf6, nFileSizeHigh=0x0, nFileSizeLow=0xa9c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELapVfsDsO4Obv1.m4a", cAlternateFileName="ELAPVF~1.M4A")) returned 1
	[0131.202] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7133a30, ftCreationTime.dwHighDateTime=0x1d5efb4, ftLastAccessTime.dwLowDateTime=0xaeb14d60, ftLastAccessTime.dwHighDateTime=0x1d5e6fc, ftLastWriteTime.dwLowDateTime=0xaeb14d60, ftLastWriteTime.dwHighDateTime=0x1d5e6fc, nFileSizeHigh=0x0, nFileSizeLow=0xc80d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3Sfqf.m4a", cAlternateFileName="")) returned 1
	[0131.203] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6f540, ftCreationTime.dwHighDateTime=0x1d5e932, ftLastAccessTime.dwLowDateTime=0xe82a0da0, ftLastAccessTime.dwHighDateTime=0x1d5e6ef, ftLastWriteTime.dwLowDateTime=0xe82a0da0, ftLastWriteTime.dwHighDateTime=0x1d5e6ef, nFileSizeHigh=0x0, nFileSizeLow=0x468c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PKl6.wav", cAlternateFileName="")) returned 1
	[0131.203] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6f540, ftCreationTime.dwHighDateTime=0x1d5e932, ftLastAccessTime.dwLowDateTime=0xe82a0da0, ftLastAccessTime.dwHighDateTime=0x1d5e6ef, ftLastWriteTime.dwLowDateTime=0xe82a0da0, ftLastWriteTime.dwHighDateTime=0x1d5e6ef, nFileSizeHigh=0x0, nFileSizeLow=0x468c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PKl6.wav", cAlternateFileName="")) returned 0
	[0131.203] FindClose (in: hFindFile=0xdd64e8 | out: hFindFile=0xdd64e8) returned 1
	[0131.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8a8) returned 1
	[0131.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8b4) returned 1
	[0131.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0131.203] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0131.203] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz", lpFilePart=0x0) returned 0x2b
	[0131.203] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb756fc00, ftCreationTime.dwHighDateTime=0x1d5f087, ftLastAccessTime.dwLowDateTime=0x252183b0, ftLastAccessTime.dwHighDateTime=0x1d5e159, ftLastWriteTime.dwLowDateTime=0x252183b0, ftLastWriteTime.dwHighDateTime=0x1d5e159, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6768
	[0131.204] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb756fc00, ftCreationTime.dwHighDateTime=0x1d5f087, ftLastAccessTime.dwLowDateTime=0x252183b0, ftLastAccessTime.dwHighDateTime=0x1d5e159, ftLastWriteTime.dwLowDateTime=0x252183b0, ftLastWriteTime.dwHighDateTime=0x1d5e159, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.204] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac9685e0, ftCreationTime.dwHighDateTime=0x1d5e229, ftLastAccessTime.dwLowDateTime=0x83d3340, ftLastAccessTime.dwHighDateTime=0x1d5e648, ftLastWriteTime.dwLowDateTime=0x83d3340, ftLastWriteTime.dwHighDateTime=0x1d5e648, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="4HlfW9.mp3", cAlternateFileName="")) returned 1
	[0131.204] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d9d1e0, ftCreationTime.dwHighDateTime=0x1d5e6f4, ftLastAccessTime.dwLowDateTime=0xf1c65b50, ftLastAccessTime.dwHighDateTime=0x1d5e584, ftLastWriteTime.dwLowDateTime=0xf1c65b50, ftLastWriteTime.dwHighDateTime=0x1d5e584, nFileSizeHigh=0x0, nFileSizeLow=0xbef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5thn0N1YXSITqn4YWH6-.m4a", cAlternateFileName="5THN0N~1.M4A")) returned 1
	[0131.204] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa25d66f0, ftCreationTime.dwHighDateTime=0x1d5ecdf, ftLastAccessTime.dwLowDateTime=0x995faa30, ftLastAccessTime.dwHighDateTime=0x1d5e6aa, ftLastWriteTime.dwLowDateTime=0x995faa30, ftLastWriteTime.dwHighDateTime=0x1d5e6aa, nFileSizeHigh=0x0, nFileSizeLow=0x16341, dwReserved0=0x0, dwReserved1=0x0, cFileName="8jiqKKwHR.wav", cAlternateFileName="8JIQKK~1.WAV")) returned 1
	[0131.204] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b88de0, ftCreationTime.dwHighDateTime=0x1d5edc0, ftLastAccessTime.dwLowDateTime=0x88a064b0, ftLastAccessTime.dwHighDateTime=0x1d5ee8d, ftLastWriteTime.dwLowDateTime=0x88a064b0, ftLastWriteTime.dwHighDateTime=0x1d5ee8d, nFileSizeHigh=0x0, nFileSizeLow=0x1229, dwReserved0=0x0, dwReserved1=0x0, cFileName="hkrH4xWZ3ZQ4EMt7jc.m4a", cAlternateFileName="HKRH4X~1.M4A")) returned 1
	[0131.205] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d0430, ftCreationTime.dwHighDateTime=0x1d5ea32, ftLastAccessTime.dwLowDateTime=0x4c4ae6e0, ftLastAccessTime.dwHighDateTime=0x1d5ea53, ftLastWriteTime.dwLowDateTime=0x4c4ae6e0, ftLastWriteTime.dwHighDateTime=0x1d5ea53, nFileSizeHigh=0x0, nFileSizeLow=0x17613, dwReserved0=0x0, dwReserved1=0x0, cFileName="oVZdG.m4a", cAlternateFileName="")) returned 1
	[0131.205] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd70b2a90, ftCreationTime.dwHighDateTime=0x1d5eb72, ftLastAccessTime.dwLowDateTime=0x91db9850, ftLastAccessTime.dwHighDateTime=0x1d5e2ea, ftLastWriteTime.dwLowDateTime=0x91db9850, ftLastWriteTime.dwHighDateTime=0x1d5e2ea, nFileSizeHigh=0x0, nFileSizeLow=0x64c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="syyQ9If.m4a", cAlternateFileName="")) returned 1
	[0131.205] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd725a260, ftCreationTime.dwHighDateTime=0x1d5e359, ftLastAccessTime.dwLowDateTime=0x8c7051d0, ftLastAccessTime.dwHighDateTime=0x1d5e560, ftLastWriteTime.dwLowDateTime=0x8c7051d0, ftLastWriteTime.dwHighDateTime=0x1d5e560, nFileSizeHigh=0x0, nFileSizeLow=0x4410, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAO SL5LOf7Zj7tTlu-P.wav", cAlternateFileName="TAOSL5~1.WAV")) returned 1
	[0131.205] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.205] FindClose (in: hFindFile=0xdd6768 | out: hFindFile=0xdd6768) returned 1
	[0131.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0131.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0131.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0131.206] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0131.206] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz", lpFilePart=0x0) returned 0x2b
	[0131.206] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb756fc00, ftCreationTime.dwHighDateTime=0x1d5f087, ftLastAccessTime.dwLowDateTime=0x252183b0, ftLastAccessTime.dwHighDateTime=0x1d5e159, ftLastWriteTime.dwLowDateTime=0x252183b0, ftLastWriteTime.dwHighDateTime=0x1d5e159, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6328
	[0131.207] FindNextFileW (in: hFindFile=0xdd6328, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb756fc00, ftCreationTime.dwHighDateTime=0x1d5f087, ftLastAccessTime.dwLowDateTime=0x252183b0, ftLastAccessTime.dwHighDateTime=0x1d5e159, ftLastWriteTime.dwLowDateTime=0x252183b0, ftLastWriteTime.dwHighDateTime=0x1d5e159, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.207] FindNextFileW (in: hFindFile=0xdd6328, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac9685e0, ftCreationTime.dwHighDateTime=0x1d5e229, ftLastAccessTime.dwLowDateTime=0x83d3340, ftLastAccessTime.dwHighDateTime=0x1d5e648, ftLastWriteTime.dwLowDateTime=0x83d3340, ftLastWriteTime.dwHighDateTime=0x1d5e648, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="4HlfW9.mp3", cAlternateFileName="")) returned 1
	[0131.207] FindNextFileW (in: hFindFile=0xdd6328, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d9d1e0, ftCreationTime.dwHighDateTime=0x1d5e6f4, ftLastAccessTime.dwLowDateTime=0xf1c65b50, ftLastAccessTime.dwHighDateTime=0x1d5e584, ftLastWriteTime.dwLowDateTime=0xf1c65b50, ftLastWriteTime.dwHighDateTime=0x1d5e584, nFileSizeHigh=0x0, nFileSizeLow=0xbef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5thn0N1YXSITqn4YWH6-.m4a", cAlternateFileName="5THN0N~1.M4A")) returned 1
	[0131.207] FindNextFileW (in: hFindFile=0xdd6328, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa25d66f0, ftCreationTime.dwHighDateTime=0x1d5ecdf, ftLastAccessTime.dwLowDateTime=0x995faa30, ftLastAccessTime.dwHighDateTime=0x1d5e6aa, ftLastWriteTime.dwLowDateTime=0x995faa30, ftLastWriteTime.dwHighDateTime=0x1d5e6aa, nFileSizeHigh=0x0, nFileSizeLow=0x16341, dwReserved0=0x0, dwReserved1=0x0, cFileName="8jiqKKwHR.wav", cAlternateFileName="8JIQKK~1.WAV")) returned 1
	[0131.207] FindNextFileW (in: hFindFile=0xdd6328, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b88de0, ftCreationTime.dwHighDateTime=0x1d5edc0, ftLastAccessTime.dwLowDateTime=0x88a064b0, ftLastAccessTime.dwHighDateTime=0x1d5ee8d, ftLastWriteTime.dwLowDateTime=0x88a064b0, ftLastWriteTime.dwHighDateTime=0x1d5ee8d, nFileSizeHigh=0x0, nFileSizeLow=0x1229, dwReserved0=0x0, dwReserved1=0x0, cFileName="hkrH4xWZ3ZQ4EMt7jc.m4a", cAlternateFileName="HKRH4X~1.M4A")) returned 1
	[0131.208] FindNextFileW (in: hFindFile=0xdd6328, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d0430, ftCreationTime.dwHighDateTime=0x1d5ea32, ftLastAccessTime.dwLowDateTime=0x4c4ae6e0, ftLastAccessTime.dwHighDateTime=0x1d5ea53, ftLastWriteTime.dwLowDateTime=0x4c4ae6e0, ftLastWriteTime.dwHighDateTime=0x1d5ea53, nFileSizeHigh=0x0, nFileSizeLow=0x17613, dwReserved0=0x0, dwReserved1=0x0, cFileName="oVZdG.m4a", cAlternateFileName="")) returned 1
	[0131.208] FindNextFileW (in: hFindFile=0xdd6328, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd70b2a90, ftCreationTime.dwHighDateTime=0x1d5eb72, ftLastAccessTime.dwLowDateTime=0x91db9850, ftLastAccessTime.dwHighDateTime=0x1d5e2ea, ftLastWriteTime.dwLowDateTime=0x91db9850, ftLastWriteTime.dwHighDateTime=0x1d5e2ea, nFileSizeHigh=0x0, nFileSizeLow=0x64c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="syyQ9If.m4a", cAlternateFileName="")) returned 1
	[0131.208] FindNextFileW (in: hFindFile=0xdd6328, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd725a260, ftCreationTime.dwHighDateTime=0x1d5e359, ftLastAccessTime.dwLowDateTime=0x8c7051d0, ftLastAccessTime.dwHighDateTime=0x1d5e560, ftLastWriteTime.dwLowDateTime=0x8c7051d0, ftLastWriteTime.dwHighDateTime=0x1d5e560, nFileSizeHigh=0x0, nFileSizeLow=0x4410, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAO SL5LOf7Zj7tTlu-P.wav", cAlternateFileName="TAOSL5~1.WAV")) returned 1
	[0131.208] FindNextFileW (in: hFindFile=0xdd6328, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd725a260, ftCreationTime.dwHighDateTime=0x1d5e359, ftLastAccessTime.dwLowDateTime=0x8c7051d0, ftLastAccessTime.dwHighDateTime=0x1d5e560, ftLastWriteTime.dwLowDateTime=0x8c7051d0, ftLastWriteTime.dwHighDateTime=0x1d5e560, nFileSizeHigh=0x0, nFileSizeLow=0x4410, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAO SL5LOf7Zj7tTlu-P.wav", cAlternateFileName="TAOSL5~1.WAV")) returned 0
	[0131.208] FindClose (in: hFindFile=0xdd6328 | out: hFindFile=0xdd6328) returned 1
	[0131.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0131.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0131.209] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37
	[0131.209] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3", nBufferLength=0x37, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3", lpFilePart=0x0) returned 0x36
	[0131.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0131.209] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\dis0knz\\4hlfw9.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.209] GetFileType (hFile=0x2d0) returned 0x1
	[0131.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0131.209] GetFileType (hFile=0x2d0) returned 0x1
	[0131.209] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0xeb4
	[0131.209] ReadFile (in: hFile=0x2d0, lpBuffer=0x29763b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x29763b8*, lpNumberOfBytesRead=0xafe8b4*=0xeb4, lpOverlapped=0x0) returned 1
	[0131.210] CloseHandle (hObject=0x2d0) returned 1
	[0131.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0131.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0131.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37
	[0131.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3", nBufferLength=0x37, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3", lpFilePart=0x0) returned 0x36
	[0131.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0131.236] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\dis0knz\\4hlfw9.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.245] GetFileType (hFile=0x2d0) returned 0x1
	[0131.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0131.245] GetFileType (hFile=0x2d0) returned 0x1
	[0131.245] WriteFile (in: hFile=0x2d0, lpBuffer=0x29c8e14*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0xafe87c, lpOverlapped=0x0 | out: lpBuffer=0x29c8e14*, lpNumberOfBytesWritten=0xafe87c*=0xec0, lpOverlapped=0x0) returned 1
	[0131.246] CloseHandle (hObject=0x2d0) returned 1
	[0131.247] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37
	[0131.247] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3", nBufferLength=0x37, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3", lpFilePart=0x0) returned 0x36
	[0131.247] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d
	[0131.247] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3.rogue", nBufferLength=0x3d, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3.rogue", lpFilePart=0x0) returned 0x3c
	[0131.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0131.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\dis0knz\\4hlfw9.mp3"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac9685e0, ftCreationTime.dwHighDateTime=0x1d5e229, ftLastAccessTime.dwLowDateTime=0x83d3340, ftLastAccessTime.dwHighDateTime=0x1d5e648, ftLastWriteTime.dwLowDateTime=0xaf7d9a8f, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xec0)) returned 1
	[0131.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0131.247] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\dis0knz\\4hlfw9.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\DIS0knz\\4HlfW9.mp3.rogue" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\dis0knz\\4hlfw9.mp3.rogue")) returned 1
	[0131.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0131.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0131.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh", lpFilePart=0x0) returned 0x34
	[0131.248] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b60340, ftCreationTime.dwHighDateTime=0x1d5eb09, ftLastAccessTime.dwLowDateTime=0x15ce05b0, ftLastAccessTime.dwHighDateTime=0x1d5e577, ftLastWriteTime.dwLowDateTime=0x15ce05b0, ftLastWriteTime.dwHighDateTime=0x1d5e577, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd65a8
	[0131.248] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b60340, ftCreationTime.dwHighDateTime=0x1d5eb09, ftLastAccessTime.dwLowDateTime=0x15ce05b0, ftLastAccessTime.dwHighDateTime=0x1d5e577, ftLastWriteTime.dwLowDateTime=0x15ce05b0, ftLastWriteTime.dwHighDateTime=0x1d5e577, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.248] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf468c0, ftCreationTime.dwHighDateTime=0x1d5ec64, ftLastAccessTime.dwLowDateTime=0xdf70bc50, ftLastAccessTime.dwHighDateTime=0x1d5ebd0, ftLastWriteTime.dwLowDateTime=0xdf70bc50, ftLastWriteTime.dwHighDateTime=0x1d5ebd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4Qpbt lEYw-", cAlternateFileName="4QPBTL~1")) returned 1
	[0131.249] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa140750, ftCreationTime.dwHighDateTime=0x1d5e230, ftLastAccessTime.dwLowDateTime=0x3ecb8b40, ftLastAccessTime.dwHighDateTime=0x1d5f0a3, ftLastWriteTime.dwLowDateTime=0x3ecb8b40, ftLastWriteTime.dwHighDateTime=0x1d5f0a3, nFileSizeHigh=0x0, nFileSizeLow=0x13a35, dwReserved0=0x0, dwReserved1=0x0, cFileName="KiDaqa3g3VVh.m4a", cAlternateFileName="KIDAQA~1.M4A")) returned 1
	[0131.249] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.249] FindClose (in: hFindFile=0xdd65a8 | out: hFindFile=0xdd65a8) returned 1
	[0131.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0131.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0131.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0131.249] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0131.249] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh", lpFilePart=0x0) returned 0x34
	[0131.249] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b60340, ftCreationTime.dwHighDateTime=0x1d5eb09, ftLastAccessTime.dwLowDateTime=0x15ce05b0, ftLastAccessTime.dwHighDateTime=0x1d5e577, ftLastWriteTime.dwLowDateTime=0x15ce05b0, ftLastWriteTime.dwHighDateTime=0x1d5e577, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6428
	[0131.250] FindNextFileW (in: hFindFile=0xdd6428, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b60340, ftCreationTime.dwHighDateTime=0x1d5eb09, ftLastAccessTime.dwLowDateTime=0x15ce05b0, ftLastAccessTime.dwHighDateTime=0x1d5e577, ftLastWriteTime.dwLowDateTime=0x15ce05b0, ftLastWriteTime.dwHighDateTime=0x1d5e577, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.250] FindNextFileW (in: hFindFile=0xdd6428, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf468c0, ftCreationTime.dwHighDateTime=0x1d5ec64, ftLastAccessTime.dwLowDateTime=0xdf70bc50, ftLastAccessTime.dwHighDateTime=0x1d5ebd0, ftLastWriteTime.dwLowDateTime=0xdf70bc50, ftLastWriteTime.dwHighDateTime=0x1d5ebd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4Qpbt lEYw-", cAlternateFileName="4QPBTL~1")) returned 1
	[0131.250] FindNextFileW (in: hFindFile=0xdd6428, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa140750, ftCreationTime.dwHighDateTime=0x1d5e230, ftLastAccessTime.dwLowDateTime=0x3ecb8b40, ftLastAccessTime.dwHighDateTime=0x1d5f0a3, ftLastWriteTime.dwLowDateTime=0x3ecb8b40, ftLastWriteTime.dwHighDateTime=0x1d5f0a3, nFileSizeHigh=0x0, nFileSizeLow=0x13a35, dwReserved0=0x0, dwReserved1=0x0, cFileName="KiDaqa3g3VVh.m4a", cAlternateFileName="KIDAQA~1.M4A")) returned 1
	[0131.250] FindNextFileW (in: hFindFile=0xdd6428, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa140750, ftCreationTime.dwHighDateTime=0x1d5e230, ftLastAccessTime.dwLowDateTime=0x3ecb8b40, ftLastAccessTime.dwHighDateTime=0x1d5f0a3, ftLastWriteTime.dwLowDateTime=0x3ecb8b40, ftLastWriteTime.dwHighDateTime=0x1d5f0a3, nFileSizeHigh=0x0, nFileSizeLow=0x13a35, dwReserved0=0x0, dwReserved1=0x0, cFileName="KiDaqa3g3VVh.m4a", cAlternateFileName="KIDAQA~1.M4A")) returned 0
	[0131.250] FindClose (in: hFindFile=0xdd6428 | out: hFindFile=0xdd6428) returned 1
	[0131.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0131.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0131.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8ec) returned 1
	[0131.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41
	[0131.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-", nBufferLength=0x41, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-", lpFilePart=0x0) returned 0x40
	[0131.251] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\*", lpFindFileData=0xafe614 | out: lpFindFileData=0xafe614*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf468c0, ftCreationTime.dwHighDateTime=0x1d5ec64, ftLastAccessTime.dwLowDateTime=0xdf70bc50, ftLastAccessTime.dwHighDateTime=0x1d5ebd0, ftLastWriteTime.dwLowDateTime=0xdf70bc50, ftLastWriteTime.dwHighDateTime=0x1d5ebd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd64e8
	[0131.251] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf468c0, ftCreationTime.dwHighDateTime=0x1d5ec64, ftLastAccessTime.dwLowDateTime=0xdf70bc50, ftLastAccessTime.dwHighDateTime=0x1d5ebd0, ftLastWriteTime.dwLowDateTime=0xdf70bc50, ftLastWriteTime.dwHighDateTime=0x1d5ebd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.251] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae075b0, ftCreationTime.dwHighDateTime=0x1d5ee7e, ftLastAccessTime.dwLowDateTime=0xe04af900, ftLastAccessTime.dwHighDateTime=0x1d5ea0a, ftLastWriteTime.dwLowDateTime=0xe04af900, ftLastWriteTime.dwHighDateTime=0x1d5ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3395, dwReserved0=0x0, dwReserved1=0x0, cFileName="6MZAQSl8kHs4Aqqr0WwL.mp3", cAlternateFileName="6MZAQS~1.MP3")) returned 1
	[0131.251] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59dd9660, ftCreationTime.dwHighDateTime=0x1d5e2e5, ftLastAccessTime.dwLowDateTime=0x68bf61e0, ftLastAccessTime.dwHighDateTime=0x1d5e7fe, ftLastWriteTime.dwLowDateTime=0x68bf61e0, ftLastWriteTime.dwHighDateTime=0x1d5e7fe, nFileSizeHigh=0x0, nFileSizeLow=0x4020, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUkzErkbW61iZ.wav", cAlternateFileName="BUKZER~1.WAV")) returned 1
	[0131.251] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce05db0, ftCreationTime.dwHighDateTime=0x1d5ea33, ftLastAccessTime.dwLowDateTime=0x93d99360, ftLastAccessTime.dwHighDateTime=0x1d5e799, ftLastWriteTime.dwLowDateTime=0x93d99360, ftLastWriteTime.dwHighDateTime=0x1d5e799, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="M_3yJy", cAlternateFileName="")) returned 1
	[0131.252] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce05db0, ftCreationTime.dwHighDateTime=0x1d5ea33, ftLastAccessTime.dwLowDateTime=0x93d99360, ftLastAccessTime.dwHighDateTime=0x1d5e799, ftLastWriteTime.dwLowDateTime=0x93d99360, ftLastWriteTime.dwHighDateTime=0x1d5e799, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="M_3yJy", cAlternateFileName="")) returned 0
	[0131.252] FindClose (in: hFindFile=0xdd64e8 | out: hFindFile=0xdd64e8) returned 1
	[0131.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8a8) returned 1
	[0131.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8b4) returned 1
	[0131.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8ec) returned 1
	[0131.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41
	[0131.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-", nBufferLength=0x41, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-", lpFilePart=0x0) returned 0x40
	[0131.252] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\*", lpFindFileData=0xafe614 | out: lpFindFileData=0xafe614*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf468c0, ftCreationTime.dwHighDateTime=0x1d5ec64, ftLastAccessTime.dwLowDateTime=0xdf70bc50, ftLastAccessTime.dwHighDateTime=0x1d5ebd0, ftLastWriteTime.dwLowDateTime=0xdf70bc50, ftLastWriteTime.dwHighDateTime=0x1d5ebd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6168
	[0131.252] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf468c0, ftCreationTime.dwHighDateTime=0x1d5ec64, ftLastAccessTime.dwLowDateTime=0xdf70bc50, ftLastAccessTime.dwHighDateTime=0x1d5ebd0, ftLastWriteTime.dwLowDateTime=0xdf70bc50, ftLastWriteTime.dwHighDateTime=0x1d5ebd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.253] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae075b0, ftCreationTime.dwHighDateTime=0x1d5ee7e, ftLastAccessTime.dwLowDateTime=0xe04af900, ftLastAccessTime.dwHighDateTime=0x1d5ea0a, ftLastWriteTime.dwLowDateTime=0xe04af900, ftLastWriteTime.dwHighDateTime=0x1d5ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3395, dwReserved0=0x0, dwReserved1=0x0, cFileName="6MZAQSl8kHs4Aqqr0WwL.mp3", cAlternateFileName="6MZAQS~1.MP3")) returned 1
	[0131.253] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59dd9660, ftCreationTime.dwHighDateTime=0x1d5e2e5, ftLastAccessTime.dwLowDateTime=0x68bf61e0, ftLastAccessTime.dwHighDateTime=0x1d5e7fe, ftLastWriteTime.dwLowDateTime=0x68bf61e0, ftLastWriteTime.dwHighDateTime=0x1d5e7fe, nFileSizeHigh=0x0, nFileSizeLow=0x4020, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUkzErkbW61iZ.wav", cAlternateFileName="BUKZER~1.WAV")) returned 1
	[0131.253] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce05db0, ftCreationTime.dwHighDateTime=0x1d5ea33, ftLastAccessTime.dwLowDateTime=0x93d99360, ftLastAccessTime.dwHighDateTime=0x1d5e799, ftLastWriteTime.dwLowDateTime=0x93d99360, ftLastWriteTime.dwHighDateTime=0x1d5e799, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="M_3yJy", cAlternateFileName="")) returned 1
	[0131.253] FindNextFileW (in: hFindFile=0xdd6168, lpFindFileData=0xafe620 | out: lpFindFileData=0xafe620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.253] FindClose (in: hFindFile=0xdd6168 | out: hFindFile=0xdd6168) returned 1
	[0131.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8a8) returned 1
	[0131.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8b4) returned 1
	[0131.253] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a
	[0131.253] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3", nBufferLength=0x5a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3", lpFilePart=0x0) returned 0x59
	[0131.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe798) returned 1
	[0131.254] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\o wz46b_33wp6bfh\\4qpbt leyw-\\6mzaqsl8khs4aqqr0wwl.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.254] GetFileType (hFile=0x2d0) returned 0x1
	[0131.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe794) returned 1
	[0131.254] GetFileType (hFile=0x2d0) returned 0x1
	[0131.254] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe894 | out: lpFileSizeHigh=0xafe894*=0x0) returned 0x3395
	[0131.254] ReadFile (in: hFile=0x2d0, lpBuffer=0x29cce68, nNumberOfBytesToRead=0x3395, lpNumberOfBytesRead=0xafe840, lpOverlapped=0x0 | out: lpBuffer=0x29cce68*, lpNumberOfBytesRead=0xafe840*=0x3395, lpOverlapped=0x0) returned 1
	[0131.255] CloseHandle (hObject=0x2d0) returned 1
	[0131.278] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.278] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0131.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe888 | out: lpFileInformation=0xafe888*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0131.278] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a
	[0131.278] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3", nBufferLength=0x5a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3", lpFilePart=0x0) returned 0x59
	[0131.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe784) returned 1
	[0131.278] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\o wz46b_33wp6bfh\\4qpbt leyw-\\6mzaqsl8khs4aqqr0wwl.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.280] GetFileType (hFile=0x2d0) returned 0x1
	[0131.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe780) returned 1
	[0131.280] GetFileType (hFile=0x2d0) returned 0x1
	[0131.280] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a29e74*, nNumberOfBytesToWrite=0x33a0, lpNumberOfBytesWritten=0xafe834, lpOverlapped=0x0 | out: lpBuffer=0x2a29e74*, lpNumberOfBytesWritten=0xafe834*=0x33a0, lpOverlapped=0x0) returned 1
	[0131.281] CloseHandle (hObject=0x2d0) returned 1
	[0131.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a
	[0131.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3", nBufferLength=0x5a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3", lpFilePart=0x0) returned 0x59
	[0131.328] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x60
	[0131.328] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3.rogue", nBufferLength=0x60, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3.rogue", lpFilePart=0x0) returned 0x5f
	[0131.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe818) returned 1
	[0131.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\o wz46b_33wp6bfh\\4qpbt leyw-\\6mzaqsl8khs4aqqr0wwl.mp3"), fInfoLevelId=0x0, lpFileInformation=0xafe894 | out: lpFileInformation=0xafe894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae075b0, ftCreationTime.dwHighDateTime=0x1d5ee7e, ftLastAccessTime.dwLowDateTime=0xe04af900, ftLastAccessTime.dwHighDateTime=0x1d5ea0a, ftLastWriteTime.dwLowDateTime=0xaf8982de, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x33a0)) returned 1
	[0131.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe814) returned 1
	[0131.328] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\o wz46b_33wp6bfh\\4qpbt leyw-\\6mzaqsl8khs4aqqr0wwl.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\6MZAQSl8kHs4Aqqr0WwL.mp3.rogue" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\o wz46b_33wp6bfh\\4qpbt leyw-\\6mzaqsl8khs4aqqr0wwl.mp3.rogue")) returned 1
	[0131.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe878) returned 1
	[0131.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48
	[0131.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy", nBufferLength=0x48, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy", lpFilePart=0x0) returned 0x47
	[0131.329] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\*", lpFindFileData=0xafe5a0 | out: lpFindFileData=0xafe5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce05db0, ftCreationTime.dwHighDateTime=0x1d5ea33, ftLastAccessTime.dwLowDateTime=0x93d99360, ftLastAccessTime.dwHighDateTime=0x1d5e799, ftLastWriteTime.dwLowDateTime=0x93d99360, ftLastWriteTime.dwHighDateTime=0x1d5e799, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd63e8
	[0131.330] FindNextFileW (in: hFindFile=0xdd63e8, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce05db0, ftCreationTime.dwHighDateTime=0x1d5ea33, ftLastAccessTime.dwLowDateTime=0x93d99360, ftLastAccessTime.dwHighDateTime=0x1d5e799, ftLastWriteTime.dwLowDateTime=0x93d99360, ftLastWriteTime.dwHighDateTime=0x1d5e799, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.330] FindNextFileW (in: hFindFile=0xdd63e8, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec51d20, ftCreationTime.dwHighDateTime=0x1d5e769, ftLastAccessTime.dwLowDateTime=0xa7b89910, ftLastAccessTime.dwHighDateTime=0x1d5e3e0, ftLastWriteTime.dwLowDateTime=0xa7b89910, ftLastWriteTime.dwHighDateTime=0x1d5e3e0, nFileSizeHigh=0x0, nFileSizeLow=0xdf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="-KVmmzoNVkpVAuH7d.mp3", cAlternateFileName="-KVMMZ~1.MP3")) returned 1
	[0131.330] FindNextFileW (in: hFindFile=0xdd63e8, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5f320, ftCreationTime.dwHighDateTime=0x1d5e856, ftLastAccessTime.dwLowDateTime=0x9e6083b0, ftLastAccessTime.dwHighDateTime=0x1d5ecc7, ftLastWriteTime.dwLowDateTime=0x9e6083b0, ftLastWriteTime.dwHighDateTime=0x1d5ecc7, nFileSizeHigh=0x0, nFileSizeLow=0x9903, dwReserved0=0x0, dwReserved1=0x0, cFileName="3XK_9Buqq.m4a", cAlternateFileName="3XK_9B~1.M4A")) returned 1
	[0131.331] FindNextFileW (in: hFindFile=0xdd63e8, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff1727d0, ftCreationTime.dwHighDateTime=0x1d5e782, ftLastAccessTime.dwLowDateTime=0x51463550, ftLastAccessTime.dwHighDateTime=0x1d5e4ef, ftLastWriteTime.dwLowDateTime=0x51463550, ftLastWriteTime.dwHighDateTime=0x1d5e4ef, nFileSizeHigh=0x0, nFileSizeLow=0x18dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="IBFzcg-DHMe0.m4a", cAlternateFileName="IBFZCG~1.M4A")) returned 1
	[0131.331] FindNextFileW (in: hFindFile=0xdd63e8, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290587b0, ftCreationTime.dwHighDateTime=0x1d5f0db, ftLastAccessTime.dwLowDateTime=0x2f4921c0, ftLastAccessTime.dwHighDateTime=0x1d5e84f, ftLastWriteTime.dwLowDateTime=0x2f4921c0, ftLastWriteTime.dwHighDateTime=0x1d5e84f, nFileSizeHigh=0x0, nFileSizeLow=0x9088, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-UG2Nw2I.m4a", cAlternateFileName="S-UG2N~1.M4A")) returned 1
	[0131.331] FindNextFileW (in: hFindFile=0xdd63e8, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe306c820, ftCreationTime.dwHighDateTime=0x1d5ed40, ftLastAccessTime.dwLowDateTime=0x85f04c50, ftLastAccessTime.dwHighDateTime=0x1d5ea0d, ftLastWriteTime.dwLowDateTime=0x85f04c50, ftLastWriteTime.dwHighDateTime=0x1d5ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x12e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YlwNeNScBCiyb.m4a", cAlternateFileName="YLWNEN~1.M4A")) returned 1
	[0131.331] FindNextFileW (in: hFindFile=0xdd63e8, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f05e240, ftCreationTime.dwHighDateTime=0x1d5ef01, ftLastAccessTime.dwLowDateTime=0x38840280, ftLastAccessTime.dwHighDateTime=0x1d5e126, ftLastWriteTime.dwLowDateTime=0x38840280, ftLastWriteTime.dwHighDateTime=0x1d5e126, nFileSizeHigh=0x0, nFileSizeLow=0xe46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ZYQHKf8EBn.wav", cAlternateFileName="_ZYQHK~1.WAV")) returned 1
	[0131.331] FindNextFileW (in: hFindFile=0xdd63e8, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.331] FindClose (in: hFindFile=0xdd63e8 | out: hFindFile=0xdd63e8) returned 1
	[0131.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe834) returned 1
	[0131.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe840) returned 1
	[0131.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe878) returned 1
	[0131.332] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48
	[0131.332] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy", nBufferLength=0x48, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy", lpFilePart=0x0) returned 0x47
	[0131.332] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\*", lpFindFileData=0xafe5a0 | out: lpFindFileData=0xafe5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce05db0, ftCreationTime.dwHighDateTime=0x1d5ea33, ftLastAccessTime.dwLowDateTime=0x93d99360, ftLastAccessTime.dwHighDateTime=0x1d5e799, ftLastWriteTime.dwLowDateTime=0x93d99360, ftLastWriteTime.dwHighDateTime=0x1d5e799, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6368
	[0131.332] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce05db0, ftCreationTime.dwHighDateTime=0x1d5ea33, ftLastAccessTime.dwLowDateTime=0x93d99360, ftLastAccessTime.dwHighDateTime=0x1d5e799, ftLastWriteTime.dwLowDateTime=0x93d99360, ftLastWriteTime.dwHighDateTime=0x1d5e799, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.332] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec51d20, ftCreationTime.dwHighDateTime=0x1d5e769, ftLastAccessTime.dwLowDateTime=0xa7b89910, ftLastAccessTime.dwHighDateTime=0x1d5e3e0, ftLastWriteTime.dwLowDateTime=0xa7b89910, ftLastWriteTime.dwHighDateTime=0x1d5e3e0, nFileSizeHigh=0x0, nFileSizeLow=0xdf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="-KVmmzoNVkpVAuH7d.mp3", cAlternateFileName="-KVMMZ~1.MP3")) returned 1
	[0131.332] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5f320, ftCreationTime.dwHighDateTime=0x1d5e856, ftLastAccessTime.dwLowDateTime=0x9e6083b0, ftLastAccessTime.dwHighDateTime=0x1d5ecc7, ftLastWriteTime.dwLowDateTime=0x9e6083b0, ftLastWriteTime.dwHighDateTime=0x1d5ecc7, nFileSizeHigh=0x0, nFileSizeLow=0x9903, dwReserved0=0x0, dwReserved1=0x0, cFileName="3XK_9Buqq.m4a", cAlternateFileName="3XK_9B~1.M4A")) returned 1
	[0131.332] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff1727d0, ftCreationTime.dwHighDateTime=0x1d5e782, ftLastAccessTime.dwLowDateTime=0x51463550, ftLastAccessTime.dwHighDateTime=0x1d5e4ef, ftLastWriteTime.dwLowDateTime=0x51463550, ftLastWriteTime.dwHighDateTime=0x1d5e4ef, nFileSizeHigh=0x0, nFileSizeLow=0x18dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="IBFzcg-DHMe0.m4a", cAlternateFileName="IBFZCG~1.M4A")) returned 1
	[0131.333] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290587b0, ftCreationTime.dwHighDateTime=0x1d5f0db, ftLastAccessTime.dwLowDateTime=0x2f4921c0, ftLastAccessTime.dwHighDateTime=0x1d5e84f, ftLastWriteTime.dwLowDateTime=0x2f4921c0, ftLastWriteTime.dwHighDateTime=0x1d5e84f, nFileSizeHigh=0x0, nFileSizeLow=0x9088, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-UG2Nw2I.m4a", cAlternateFileName="S-UG2N~1.M4A")) returned 1
	[0131.333] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe306c820, ftCreationTime.dwHighDateTime=0x1d5ed40, ftLastAccessTime.dwLowDateTime=0x85f04c50, ftLastAccessTime.dwHighDateTime=0x1d5ea0d, ftLastWriteTime.dwLowDateTime=0x85f04c50, ftLastWriteTime.dwHighDateTime=0x1d5ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x12e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YlwNeNScBCiyb.m4a", cAlternateFileName="YLWNEN~1.M4A")) returned 1
	[0131.333] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f05e240, ftCreationTime.dwHighDateTime=0x1d5ef01, ftLastAccessTime.dwLowDateTime=0x38840280, ftLastAccessTime.dwHighDateTime=0x1d5e126, ftLastWriteTime.dwLowDateTime=0x38840280, ftLastWriteTime.dwHighDateTime=0x1d5e126, nFileSizeHigh=0x0, nFileSizeLow=0xe46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ZYQHKf8EBn.wav", cAlternateFileName="_ZYQHK~1.WAV")) returned 1
	[0131.333] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe5ac | out: lpFindFileData=0xafe5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f05e240, ftCreationTime.dwHighDateTime=0x1d5ef01, ftLastAccessTime.dwLowDateTime=0x38840280, ftLastAccessTime.dwHighDateTime=0x1d5e126, ftLastWriteTime.dwLowDateTime=0x38840280, ftLastWriteTime.dwHighDateTime=0x1d5e126, nFileSizeHigh=0x0, nFileSizeLow=0xe46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ZYQHKf8EBn.wav", cAlternateFileName="_ZYQHK~1.WAV")) returned 0
	[0131.333] FindClose (in: hFindFile=0xdd6368 | out: hFindFile=0xdd6368) returned 1
	[0131.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe834) returned 1
	[0131.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe840) returned 1
	[0131.334] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5e
	[0131.334] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3", nBufferLength=0x5e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3", lpFilePart=0x0) returned 0x5d
	[0131.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe724) returned 1
	[0131.334] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\o wz46b_33wp6bfh\\4qpbt leyw-\\m_3yjy\\-kvmmzonvkpvauh7d.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.334] GetFileType (hFile=0x2d0) returned 0x1
	[0131.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe720) returned 1
	[0131.334] GetFileType (hFile=0x2d0) returned 0x1
	[0131.334] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe820 | out: lpFileSizeHigh=0xafe820*=0x0) returned 0xdf68
	[0131.334] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a2fd84, nNumberOfBytesToRead=0xdf68, lpNumberOfBytesRead=0xafe7cc, lpOverlapped=0x0 | out: lpBuffer=0x2a2fd84*, lpNumberOfBytesRead=0xafe7cc*=0xdf68, lpOverlapped=0x0) returned 1
	[0131.335] CloseHandle (hObject=0x2d0) returned 1
	[0131.353] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.353] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe798) returned 1
	[0131.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe814 | out: lpFileInformation=0xafe814*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe794) returned 1
	[0131.353] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5e
	[0131.353] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3", nBufferLength=0x5e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3", lpFilePart=0x0) returned 0x5d
	[0131.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe710) returned 1
	[0131.354] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\o wz46b_33wp6bfh\\4qpbt leyw-\\m_3yjy\\-kvmmzonvkpvauh7d.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.355] GetFileType (hFile=0x2d0) returned 0x1
	[0131.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe70c) returned 1
	[0131.355] GetFileType (hFile=0x2d0) returned 0x1
	[0131.355] WriteFile (in: hFile=0x2d0, lpBuffer=0x2aa69d0*, nNumberOfBytesToWrite=0xdf70, lpNumberOfBytesWritten=0xafe7c0, lpOverlapped=0x0 | out: lpBuffer=0x2aa69d0*, lpNumberOfBytesWritten=0xafe7c0*=0xdf70, lpOverlapped=0x0) returned 1
	[0131.357] CloseHandle (hObject=0x2d0) returned 1
	[0131.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5e
	[0131.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3", nBufferLength=0x5e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3", lpFilePart=0x0) returned 0x5d
	[0131.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x64
	[0131.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3.rogue", nBufferLength=0x64, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3.rogue", lpFilePart=0x0) returned 0x63
	[0131.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7a4) returned 1
	[0131.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\o wz46b_33wp6bfh\\4qpbt leyw-\\m_3yjy\\-kvmmzonvkpvauh7d.mp3"), fInfoLevelId=0x0, lpFileInformation=0xafe820 | out: lpFileInformation=0xafe820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec51d20, ftCreationTime.dwHighDateTime=0x1d5e769, ftLastAccessTime.dwLowDateTime=0xa7b89910, ftLastAccessTime.dwHighDateTime=0x1d5e3e0, ftLastWriteTime.dwLowDateTime=0xaf8e4dd3, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xdf70)) returned 1
	[0131.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7a0) returned 1
	[0131.359] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\o wz46b_33wp6bfh\\4qpbt leyw-\\m_3yjy\\-kvmmzonvkpvauh7d.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\NxUKdOUgrEDWs\\o WZ46b_33Wp6bFh\\4Qpbt lEYw-\\M_3yJy\\-KVmmzoNVkpVAuH7d.mp3.rogue" (normalized: "c:\\users\\fd1hvy\\music\\nxukdougredws\\o wz46b_33wp6bfh\\4qpbt leyw-\\m_3yjy\\-kvmmzonvkpvauh7d.mp3.rogue")) returned 1
	[0131.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0131.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19
	[0131.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x19, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\OneDrive", lpFilePart=0x0) returned 0x18
	[0131.360] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6368
	[0131.366] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.367] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0131.367] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.367] FindClose (in: hFindFile=0xdd6368 | out: hFindFile=0xdd6368) returned 1
	[0131.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0131.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0131.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0131.367] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19
	[0131.367] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x19, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\OneDrive", lpFilePart=0x0) returned 0x18
	[0131.367] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd60a8
	[0131.367] FindNextFileW (in: hFindFile=0xdd60a8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.368] FindNextFileW (in: hFindFile=0xdd60a8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0131.368] FindNextFileW (in: hFindFile=0xdd60a8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0131.368] FindClose (in: hFindFile=0xdd60a8 | out: hFindFile=0xdd60a8) returned 1
	[0131.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0131.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0131.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0131.368] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c
	[0131.368] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games", nBufferLength=0x1c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Saved Games", lpFilePart=0x0) returned 0x1b
	[0131.368] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6568
	[0131.369] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.369] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0131.369] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.369] FindClose (in: hFindFile=0xdd6568 | out: hFindFile=0xdd6568) returned 1
	[0131.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0131.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0131.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0131.369] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c
	[0131.369] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games", nBufferLength=0x1c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Saved Games", lpFilePart=0x0) returned 0x1b
	[0131.369] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6568
	[0131.370] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.370] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0131.370] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0131.370] FindClose (in: hFindFile=0xdd6568 | out: hFindFile=0xdd6568) returned 1
	[0131.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0131.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0131.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0131.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a
	[0131.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites", nBufferLength=0x1a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites", lpFilePart=0x0) returned 0x19
	[0131.370] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6368
	[0131.371] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.371] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x43b9f870, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bing.url", cAlternateFileName="")) returned 1
	[0131.371] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0131.371] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0131.371] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 0
	[0131.371] FindClose (in: hFindFile=0xdd6368 | out: hFindFile=0xdd6368) returned 1
	[0131.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0131.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0131.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0131.372] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a
	[0131.372] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites", nBufferLength=0x1a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites", lpFilePart=0x0) returned 0x19
	[0131.372] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd63e8
	[0131.372] FindNextFileW (in: hFindFile=0xdd63e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.372] FindNextFileW (in: hFindFile=0xdd63e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x43b9f870, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bing.url", cAlternateFileName="")) returned 1
	[0131.372] FindNextFileW (in: hFindFile=0xdd63e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0131.372] FindNextFileW (in: hFindFile=0xdd63e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0131.372] FindNextFileW (in: hFindFile=0xdd63e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.373] FindClose (in: hFindFile=0xdd63e8 | out: hFindFile=0xdd63e8) returned 1
	[0131.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0131.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0131.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0131.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x20
	[0131.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links", nBufferLength=0x20, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\Links", lpFilePart=0x0) returned 0x1f
	[0131.373] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6768
	[0131.374] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.374] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4360b38e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4360b38e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x4360b38e, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0131.374] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.374] FindClose (in: hFindFile=0xdd6768 | out: hFindFile=0xdd6768) returned 1
	[0131.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0131.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0131.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0131.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x20
	[0131.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links", nBufferLength=0x20, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\Links", lpFilePart=0x0) returned 0x1f
	[0131.375] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6768
	[0131.375] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.375] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4360b38e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4360b38e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x4360b38e, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0131.375] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4360b38e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4360b38e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x4360b38e, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0131.375] FindClose (in: hFindFile=0xdd6768 | out: hFindFile=0xdd6768) returned 1
	[0131.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0131.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0131.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0131.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19
	[0131.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches", nBufferLength=0x19, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches", lpFilePart=0x0) returned 0x18
	[0131.376] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6368
	[0131.376] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.376] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0131.376] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44269063, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44269063, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44269063, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0131.376] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44242e24, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44242e24, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44242e24, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
	[0131.376] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 1
	[0131.377] FindNextFileW (in: hFindFile=0xdd6368, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.377] FindClose (in: hFindFile=0xdd6368 | out: hFindFile=0xdd6368) returned 1
	[0131.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0131.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0131.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0131.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19
	[0131.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches", nBufferLength=0x19, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches", lpFilePart=0x0) returned 0x18
	[0131.377] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6768
	[0131.378] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.378] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0131.378] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44269063, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44269063, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44269063, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0131.378] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44242e24, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44242e24, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44242e24, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
	[0131.378] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 1
	[0131.378] FindNextFileW (in: hFindFile=0xdd6768, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 0
	[0131.378] FindClose (in: hFindFile=0xdd6768 | out: hFindFile=0xdd6768) returned 1
	[0131.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0131.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0131.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0131.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x17
	[0131.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x17, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16
	[0131.379] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec647fd7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec647fd7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd60e8
	[0131.379] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec647fd7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec647fd7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.379] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea6c8090, ftCreationTime.dwHighDateTime=0x1d5ee63, ftLastAccessTime.dwLowDateTime=0xa6570e30, ftLastAccessTime.dwHighDateTime=0x1d5e97b, ftLastWriteTime.dwLowDateTime=0xa6570e30, ftLastWriteTime.dwHighDateTime=0x1d5e97b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7Xr-Oo23S8", cAlternateFileName="7XR-OO~1")) returned 1
	[0131.379] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84f9d0, ftCreationTime.dwHighDateTime=0x1d5e20b, ftLastAccessTime.dwLowDateTime=0xbbd2bbd0, ftLastAccessTime.dwHighDateTime=0x1d5e0ff, ftLastWriteTime.dwLowDateTime=0xbbd2bbd0, ftLastWriteTime.dwHighDateTime=0x1d5e0ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aix-E96OYhF8MvO_8sR", cAlternateFileName="AIX-E9~1")) returned 1
	[0131.379] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0281100, ftCreationTime.dwHighDateTime=0x1d5ef22, ftLastAccessTime.dwLowDateTime=0xd6715400, ftLastAccessTime.dwHighDateTime=0x1d5e8df, ftLastWriteTime.dwLowDateTime=0xd6715400, ftLastWriteTime.dwHighDateTime=0x1d5e8df, nFileSizeHigh=0x0, nFileSizeLow=0x111aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="cCqv1H3Cbyf7.mkv", cAlternateFileName="CCQV1H~1.MKV")) returned 1
	[0131.379] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0131.379] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8390c1e0, ftCreationTime.dwHighDateTime=0x1d5e190, ftLastAccessTime.dwLowDateTime=0xb3057050, ftLastAccessTime.dwHighDateTime=0x1d5ed12, ftLastWriteTime.dwLowDateTime=0xb3057050, ftLastWriteTime.dwHighDateTime=0x1d5ed12, nFileSizeHigh=0x0, nFileSizeLow=0x11663, dwReserved0=0x0, dwReserved1=0x0, cFileName="DZ9rEGeg0KwL.mkv", cAlternateFileName="DZ9REG~1.MKV")) returned 1
	[0131.379] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c3a7f20, ftCreationTime.dwHighDateTime=0x1d5e42b, ftLastAccessTime.dwLowDateTime=0xffe128f0, ftLastAccessTime.dwHighDateTime=0x1d5ef61, ftLastWriteTime.dwLowDateTime=0xffe128f0, ftLastWriteTime.dwHighDateTime=0x1d5ef61, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="In19VFIy2b-epIQfL-02", cAlternateFileName="IN19VF~1")) returned 1
	[0131.380] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd3d9300, ftCreationTime.dwHighDateTime=0x1d5e1e8, ftLastAccessTime.dwLowDateTime=0xb6e1f80, ftLastAccessTime.dwHighDateTime=0x1d5eb38, ftLastWriteTime.dwLowDateTime=0xb6e1f80, ftLastWriteTime.dwHighDateTime=0x1d5eb38, nFileSizeHigh=0x0, nFileSizeLow=0xa3d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="lIBZU.mkv", cAlternateFileName="")) returned 1
	[0131.380] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91c0f150, ftCreationTime.dwHighDateTime=0x1d5e31f, ftLastAccessTime.dwLowDateTime=0x23f9dee0, ftLastAccessTime.dwHighDateTime=0x1d5f047, ftLastWriteTime.dwLowDateTime=0x23f9dee0, ftLastWriteTime.dwHighDateTime=0x1d5f047, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vhK8-kbqSOIYLuXImoK", cAlternateFileName="VHK8-K~1")) returned 1
	[0131.380] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa999ca50, ftCreationTime.dwHighDateTime=0x1d5e800, ftLastAccessTime.dwLowDateTime=0x1519fa00, ftLastAccessTime.dwHighDateTime=0x1d5e70e, ftLastWriteTime.dwLowDateTime=0x1519fa00, ftLastWriteTime.dwHighDateTime=0x1d5e70e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ws3V7I0a_y5KqeVNV4p", cAlternateFileName="WS3V7I~1")) returned 1
	[0131.380] FindNextFileW (in: hFindFile=0xdd60e8, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa999ca50, ftCreationTime.dwHighDateTime=0x1d5e800, ftLastAccessTime.dwLowDateTime=0x1519fa00, ftLastAccessTime.dwHighDateTime=0x1d5e70e, ftLastWriteTime.dwLowDateTime=0x1519fa00, ftLastWriteTime.dwHighDateTime=0x1d5e70e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ws3V7I0a_y5KqeVNV4p", cAlternateFileName="WS3V7I~1")) returned 0
	[0131.380] FindClose (in: hFindFile=0xdd60e8 | out: hFindFile=0xdd60e8) returned 1
	[0131.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0131.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0131.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea48) returned 1
	[0131.380] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x17
	[0131.380] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x17, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16
	[0131.380] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*", lpFindFileData=0xafe770 | out: lpFindFileData=0xafe770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec647fd7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec647fd7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6568
	[0131.380] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xec647fd7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec647fd7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.380] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea6c8090, ftCreationTime.dwHighDateTime=0x1d5ee63, ftLastAccessTime.dwLowDateTime=0xa6570e30, ftLastAccessTime.dwHighDateTime=0x1d5e97b, ftLastWriteTime.dwLowDateTime=0xa6570e30, ftLastWriteTime.dwHighDateTime=0x1d5e97b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7Xr-Oo23S8", cAlternateFileName="7XR-OO~1")) returned 1
	[0131.380] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84f9d0, ftCreationTime.dwHighDateTime=0x1d5e20b, ftLastAccessTime.dwLowDateTime=0xbbd2bbd0, ftLastAccessTime.dwHighDateTime=0x1d5e0ff, ftLastWriteTime.dwLowDateTime=0xbbd2bbd0, ftLastWriteTime.dwHighDateTime=0x1d5e0ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aix-E96OYhF8MvO_8sR", cAlternateFileName="AIX-E9~1")) returned 1
	[0131.380] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0281100, ftCreationTime.dwHighDateTime=0x1d5ef22, ftLastAccessTime.dwLowDateTime=0xd6715400, ftLastAccessTime.dwHighDateTime=0x1d5e8df, ftLastWriteTime.dwLowDateTime=0xd6715400, ftLastWriteTime.dwHighDateTime=0x1d5e8df, nFileSizeHigh=0x0, nFileSizeLow=0x111aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="cCqv1H3Cbyf7.mkv", cAlternateFileName="CCQV1H~1.MKV")) returned 1
	[0131.380] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0131.380] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8390c1e0, ftCreationTime.dwHighDateTime=0x1d5e190, ftLastAccessTime.dwLowDateTime=0xb3057050, ftLastAccessTime.dwHighDateTime=0x1d5ed12, ftLastWriteTime.dwLowDateTime=0xb3057050, ftLastWriteTime.dwHighDateTime=0x1d5ed12, nFileSizeHigh=0x0, nFileSizeLow=0x11663, dwReserved0=0x0, dwReserved1=0x0, cFileName="DZ9rEGeg0KwL.mkv", cAlternateFileName="DZ9REG~1.MKV")) returned 1
	[0131.380] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c3a7f20, ftCreationTime.dwHighDateTime=0x1d5e42b, ftLastAccessTime.dwLowDateTime=0xffe128f0, ftLastAccessTime.dwHighDateTime=0x1d5ef61, ftLastWriteTime.dwLowDateTime=0xffe128f0, ftLastWriteTime.dwHighDateTime=0x1d5ef61, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="In19VFIy2b-epIQfL-02", cAlternateFileName="IN19VF~1")) returned 1
	[0131.381] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd3d9300, ftCreationTime.dwHighDateTime=0x1d5e1e8, ftLastAccessTime.dwLowDateTime=0xb6e1f80, ftLastAccessTime.dwHighDateTime=0x1d5eb38, ftLastWriteTime.dwLowDateTime=0xb6e1f80, ftLastWriteTime.dwHighDateTime=0x1d5eb38, nFileSizeHigh=0x0, nFileSizeLow=0xa3d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="lIBZU.mkv", cAlternateFileName="")) returned 1
	[0131.381] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91c0f150, ftCreationTime.dwHighDateTime=0x1d5e31f, ftLastAccessTime.dwLowDateTime=0x23f9dee0, ftLastAccessTime.dwHighDateTime=0x1d5f047, ftLastWriteTime.dwLowDateTime=0x23f9dee0, ftLastWriteTime.dwHighDateTime=0x1d5f047, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vhK8-kbqSOIYLuXImoK", cAlternateFileName="VHK8-K~1")) returned 1
	[0131.381] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa999ca50, ftCreationTime.dwHighDateTime=0x1d5e800, ftLastAccessTime.dwLowDateTime=0x1519fa00, ftLastAccessTime.dwHighDateTime=0x1d5e70e, ftLastWriteTime.dwLowDateTime=0x1519fa00, ftLastWriteTime.dwHighDateTime=0x1d5e70e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ws3V7I0a_y5KqeVNV4p", cAlternateFileName="WS3V7I~1")) returned 1
	[0131.381] FindNextFileW (in: hFindFile=0xdd6568, lpFindFileData=0xafe77c | out: lpFindFileData=0xafe77c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.381] FindClose (in: hFindFile=0xdd6568 | out: hFindFile=0xdd6568) returned 1
	[0131.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea04) returned 1
	[0131.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea10) returned 1
	[0131.381] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0131.381] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv", lpFilePart=0x0) returned 0x27
	[0131.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0131.381] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ccqv1h3cbyf7.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.381] GetFileType (hFile=0x2d0) returned 0x1
	[0131.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0131.381] GetFileType (hFile=0x2d0) returned 0x1
	[0131.381] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x111aa
	[0131.381] ReadFile (in: hFile=0x2d0, lpBuffer=0x2abb6d4, nNumberOfBytesToRead=0x111aa, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x2abb6d4*, lpNumberOfBytesRead=0xafe99c*=0x111aa, lpOverlapped=0x0) returned 1
	[0131.382] CloseHandle (hObject=0x2d0) returned 1
	[0131.405] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.405] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0131.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0131.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0131.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv", lpFilePart=0x0) returned 0x27
	[0131.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0131.406] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ccqv1h3cbyf7.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.407] GetFileType (hFile=0x2d0) returned 0x1
	[0131.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0131.407] GetFileType (hFile=0x2d0) returned 0x1
	[0131.407] WriteFile (in: hFile=0x2d0, lpBuffer=0x2956c30*, nNumberOfBytesToWrite=0x111b0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2956c30*, lpNumberOfBytesWritten=0xafe990*=0x111b0, lpOverlapped=0x0) returned 1
	[0131.409] CloseHandle (hObject=0x2d0) returned 1
	[0131.412] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0131.412] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv", lpFilePart=0x0) returned 0x27
	[0131.412] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0131.412] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv.rogue", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv.rogue", lpFilePart=0x0) returned 0x2d
	[0131.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0131.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ccqv1h3cbyf7.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0281100, ftCreationTime.dwHighDateTime=0x1d5ef22, ftLastAccessTime.dwLowDateTime=0xd6715400, ftLastAccessTime.dwHighDateTime=0x1d5e8df, ftLastWriteTime.dwLowDateTime=0xaf97d2ca, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x111b0)) returned 1
	[0131.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0131.412] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ccqv1h3cbyf7.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\cCqv1H3Cbyf7.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\ccqv1h3cbyf7.mkv.rogue")) returned 1
	[0131.413] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0131.413] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv", lpFilePart=0x0) returned 0x27
	[0131.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0131.413] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\dz9regeg0kwl.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.413] GetFileType (hFile=0x2d0) returned 0x1
	[0131.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0131.413] GetFileType (hFile=0x2d0) returned 0x1
	[0131.413] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0x11663
	[0131.413] ReadFile (in: hFile=0x2d0, lpBuffer=0x296805c, nNumberOfBytesToRead=0x11663, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x296805c*, lpNumberOfBytesRead=0xafe99c*=0x11663, lpOverlapped=0x0) returned 1
	[0131.414] CloseHandle (hObject=0x2d0) returned 1
	[0131.470] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.470] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0131.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0131.471] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0131.471] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv", lpFilePart=0x0) returned 0x27
	[0131.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0131.471] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\dz9regeg0kwl.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.472] GetFileType (hFile=0x2d0) returned 0x1
	[0131.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0131.473] GetFileType (hFile=0x2d0) returned 0x1
	[0131.473] WriteFile (in: hFile=0x2d0, lpBuffer=0x29e9308*, nNumberOfBytesToWrite=0x11670, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x29e9308*, lpNumberOfBytesWritten=0xafe990*=0x11670, lpOverlapped=0x0) returned 1
	[0131.474] CloseHandle (hObject=0x2d0) returned 1
	[0131.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28
	[0131.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv", nBufferLength=0x28, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv", lpFilePart=0x0) returned 0x27
	[0131.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e
	[0131.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv.rogue", nBufferLength=0x2e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv.rogue", lpFilePart=0x0) returned 0x2d
	[0131.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0131.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\dz9regeg0kwl.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8390c1e0, ftCreationTime.dwHighDateTime=0x1d5e190, ftLastAccessTime.dwLowDateTime=0xb3057050, ftLastAccessTime.dwHighDateTime=0x1d5ed12, ftLastWriteTime.dwLowDateTime=0xafa15c3c, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x11670)) returned 1
	[0131.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0131.484] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\dz9regeg0kwl.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\DZ9rEGeg0KwL.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\dz9regeg0kwl.mkv.rogue")) returned 1
	[0131.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x21
	[0131.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv", nBufferLength=0x21, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv", lpFilePart=0x0) returned 0x20
	[0131.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0131.485] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\libzu.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.485] GetFileType (hFile=0x2d0) returned 0x1
	[0131.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0131.485] GetFileType (hFile=0x2d0) returned 0x1
	[0131.485] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe9f0 | out: lpFileSizeHigh=0xafe9f0*=0x0) returned 0xa3d3
	[0131.485] ReadFile (in: hFile=0x2d0, lpBuffer=0x29fabcc, nNumberOfBytesToRead=0xa3d3, lpNumberOfBytesRead=0xafe99c, lpOverlapped=0x0 | out: lpBuffer=0x29fabcc*, lpNumberOfBytesRead=0xafe99c*=0xa3d3, lpOverlapped=0x0) returned 1
	[0131.486] CloseHandle (hObject=0x2d0) returned 1
	[0131.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe968) returned 1
	[0131.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe9e4 | out: lpFileInformation=0xafe9e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe964) returned 1
	[0131.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x21
	[0131.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv", nBufferLength=0x21, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv", lpFilePart=0x0) returned 0x20
	[0131.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8e0) returned 1
	[0131.506] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\libzu.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.507] GetFileType (hFile=0x2d0) returned 0x1
	[0131.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8dc) returned 1
	[0131.507] GetFileType (hFile=0x2d0) returned 0x1
	[0131.507] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a7ad18*, nNumberOfBytesToWrite=0xa3e0, lpNumberOfBytesWritten=0xafe990, lpOverlapped=0x0 | out: lpBuffer=0x2a7ad18*, lpNumberOfBytesWritten=0xafe990*=0xa3e0, lpOverlapped=0x0) returned 1
	[0131.509] CloseHandle (hObject=0x2d0) returned 1
	[0131.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x21
	[0131.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv", nBufferLength=0x21, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv", lpFilePart=0x0) returned 0x20
	[0131.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27
	[0131.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv.rogue", nBufferLength=0x27, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv.rogue", lpFilePart=0x0) returned 0x26
	[0131.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe974) returned 1
	[0131.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\libzu.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe9f0 | out: lpFileInformation=0xafe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd3d9300, ftCreationTime.dwHighDateTime=0x1d5e1e8, ftLastAccessTime.dwLowDateTime=0xb6e1f80, ftLastAccessTime.dwHighDateTime=0x1d5eb38, ftLastWriteTime.dwLowDateTime=0xafa62146, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xa3e0)) returned 1
	[0131.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe970) returned 1
	[0131.511] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\libzu.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\lIBZU.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\libzu.mkv.rogue")) returned 1
	[0131.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0131.512] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x22
	[0131.512] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8", nBufferLength=0x22, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8", lpFilePart=0x0) returned 0x21
	[0131.512] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea6c8090, ftCreationTime.dwHighDateTime=0x1d5ee63, ftLastAccessTime.dwLowDateTime=0xa6570e30, ftLastAccessTime.dwHighDateTime=0x1d5e97b, ftLastWriteTime.dwLowDateTime=0xa6570e30, ftLastWriteTime.dwHighDateTime=0x1d5e97b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6128
	[0131.512] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea6c8090, ftCreationTime.dwHighDateTime=0x1d5ee63, ftLastAccessTime.dwLowDateTime=0xa6570e30, ftLastAccessTime.dwHighDateTime=0x1d5e97b, ftLastWriteTime.dwLowDateTime=0xa6570e30, ftLastWriteTime.dwHighDateTime=0x1d5e97b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.512] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0493c00, ftCreationTime.dwHighDateTime=0x1d5e200, ftLastAccessTime.dwLowDateTime=0x73e9e120, ftLastAccessTime.dwHighDateTime=0x1d5f08d, ftLastWriteTime.dwLowDateTime=0x73e9e120, ftLastWriteTime.dwHighDateTime=0x1d5f08d, nFileSizeHigh=0x0, nFileSizeLow=0x64aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AgzHzcRyl.mkv", cAlternateFileName="AGZHZC~1.MKV")) returned 1
	[0131.513] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6756730, ftCreationTime.dwHighDateTime=0x1d5e566, ftLastAccessTime.dwLowDateTime=0xa8cb10, ftLastAccessTime.dwHighDateTime=0x1d5e564, ftLastWriteTime.dwLowDateTime=0xa8cb10, ftLastWriteTime.dwHighDateTime=0x1d5e564, nFileSizeHigh=0x0, nFileSizeLow=0xe9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="drFxrurDNRNBjMu S5.mp4", cAlternateFileName="DRFXRU~1.MP4")) returned 1
	[0131.513] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9db93b80, ftCreationTime.dwHighDateTime=0x1d5f0ca, ftLastAccessTime.dwLowDateTime=0xe73afed0, ftLastAccessTime.dwHighDateTime=0x1d5e4e3, ftLastWriteTime.dwLowDateTime=0xe73afed0, ftLastWriteTime.dwHighDateTime=0x1d5e4e3, nFileSizeHigh=0x0, nFileSizeLow=0x95d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EtHixtQVQawTgHR.mp4", cAlternateFileName="ETHIXT~1.MP4")) returned 1
	[0131.513] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfd81c0, ftCreationTime.dwHighDateTime=0x1d5e7ce, ftLastAccessTime.dwLowDateTime=0x4fb7b2d0, ftLastAccessTime.dwHighDateTime=0x1d5e9e1, ftLastWriteTime.dwLowDateTime=0x4fb7b2d0, ftLastWriteTime.dwHighDateTime=0x1d5e9e1, nFileSizeHigh=0x0, nFileSizeLow=0x17691, dwReserved0=0x0, dwReserved1=0x0, cFileName="lm3dqYKkuItRX7W.mp4", cAlternateFileName="LM3DQY~1.MP4")) returned 1
	[0131.513] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bb5e260, ftCreationTime.dwHighDateTime=0x1d5ef26, ftLastAccessTime.dwLowDateTime=0x18534270, ftLastAccessTime.dwHighDateTime=0x1d5e5a2, ftLastWriteTime.dwLowDateTime=0x18534270, ftLastWriteTime.dwHighDateTime=0x1d5e5a2, nFileSizeHigh=0x0, nFileSizeLow=0x122f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="M Jz0h2Iv6B4B.mp4", cAlternateFileName="MJZ0H2~1.MP4")) returned 1
	[0131.513] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f053f0, ftCreationTime.dwHighDateTime=0x1d5f04e, ftLastAccessTime.dwLowDateTime=0x5e225350, ftLastAccessTime.dwHighDateTime=0x1d5ec59, ftLastWriteTime.dwLowDateTime=0x5e225350, ftLastWriteTime.dwHighDateTime=0x1d5ec59, nFileSizeHigh=0x0, nFileSizeLow=0x15431, dwReserved0=0x0, dwReserved1=0x0, cFileName="O9OdTEm_yEz.avi", cAlternateFileName="O9ODTE~1.AVI")) returned 1
	[0131.513] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a995e0, ftCreationTime.dwHighDateTime=0x1d5ea99, ftLastAccessTime.dwLowDateTime=0xb4900820, ftLastAccessTime.dwHighDateTime=0x1d5ed37, ftLastWriteTime.dwLowDateTime=0xb4900820, ftLastWriteTime.dwHighDateTime=0x1d5ed37, nFileSizeHigh=0x0, nFileSizeLow=0x6d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="qqmGP4aL0Fh2PyCtgFjT.swf", cAlternateFileName="QQMGP4~1.SWF")) returned 1
	[0131.513] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbff25240, ftCreationTime.dwHighDateTime=0x1d5ef0d, ftLastAccessTime.dwLowDateTime=0x86d93fa0, ftLastAccessTime.dwHighDateTime=0x1d5e742, ftLastWriteTime.dwLowDateTime=0x86d93fa0, ftLastWriteTime.dwHighDateTime=0x1d5e742, nFileSizeHigh=0x0, nFileSizeLow=0xd96, dwReserved0=0x0, dwReserved1=0x0, cFileName="vY6VlU7Si_7Mq.avi", cAlternateFileName="VY6VLU~1.AVI")) returned 1
	[0131.514] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.514] FindClose (in: hFindFile=0xdd6128 | out: hFindFile=0xdd6128) returned 1
	[0131.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0131.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0131.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0131.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x22
	[0131.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8", nBufferLength=0x22, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8", lpFilePart=0x0) returned 0x21
	[0131.514] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea6c8090, ftCreationTime.dwHighDateTime=0x1d5ee63, ftLastAccessTime.dwLowDateTime=0xa6570e30, ftLastAccessTime.dwHighDateTime=0x1d5e97b, ftLastWriteTime.dwLowDateTime=0xa6570e30, ftLastWriteTime.dwHighDateTime=0x1d5e97b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6068
	[0131.514] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea6c8090, ftCreationTime.dwHighDateTime=0x1d5ee63, ftLastAccessTime.dwLowDateTime=0xa6570e30, ftLastAccessTime.dwHighDateTime=0x1d5e97b, ftLastWriteTime.dwLowDateTime=0xa6570e30, ftLastWriteTime.dwHighDateTime=0x1d5e97b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.515] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0493c00, ftCreationTime.dwHighDateTime=0x1d5e200, ftLastAccessTime.dwLowDateTime=0x73e9e120, ftLastAccessTime.dwHighDateTime=0x1d5f08d, ftLastWriteTime.dwLowDateTime=0x73e9e120, ftLastWriteTime.dwHighDateTime=0x1d5f08d, nFileSizeHigh=0x0, nFileSizeLow=0x64aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AgzHzcRyl.mkv", cAlternateFileName="AGZHZC~1.MKV")) returned 1
	[0131.515] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6756730, ftCreationTime.dwHighDateTime=0x1d5e566, ftLastAccessTime.dwLowDateTime=0xa8cb10, ftLastAccessTime.dwHighDateTime=0x1d5e564, ftLastWriteTime.dwLowDateTime=0xa8cb10, ftLastWriteTime.dwHighDateTime=0x1d5e564, nFileSizeHigh=0x0, nFileSizeLow=0xe9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="drFxrurDNRNBjMu S5.mp4", cAlternateFileName="DRFXRU~1.MP4")) returned 1
	[0131.515] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9db93b80, ftCreationTime.dwHighDateTime=0x1d5f0ca, ftLastAccessTime.dwLowDateTime=0xe73afed0, ftLastAccessTime.dwHighDateTime=0x1d5e4e3, ftLastWriteTime.dwLowDateTime=0xe73afed0, ftLastWriteTime.dwHighDateTime=0x1d5e4e3, nFileSizeHigh=0x0, nFileSizeLow=0x95d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EtHixtQVQawTgHR.mp4", cAlternateFileName="ETHIXT~1.MP4")) returned 1
	[0131.515] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfd81c0, ftCreationTime.dwHighDateTime=0x1d5e7ce, ftLastAccessTime.dwLowDateTime=0x4fb7b2d0, ftLastAccessTime.dwHighDateTime=0x1d5e9e1, ftLastWriteTime.dwLowDateTime=0x4fb7b2d0, ftLastWriteTime.dwHighDateTime=0x1d5e9e1, nFileSizeHigh=0x0, nFileSizeLow=0x17691, dwReserved0=0x0, dwReserved1=0x0, cFileName="lm3dqYKkuItRX7W.mp4", cAlternateFileName="LM3DQY~1.MP4")) returned 1
	[0131.515] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bb5e260, ftCreationTime.dwHighDateTime=0x1d5ef26, ftLastAccessTime.dwLowDateTime=0x18534270, ftLastAccessTime.dwHighDateTime=0x1d5e5a2, ftLastWriteTime.dwLowDateTime=0x18534270, ftLastWriteTime.dwHighDateTime=0x1d5e5a2, nFileSizeHigh=0x0, nFileSizeLow=0x122f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="M Jz0h2Iv6B4B.mp4", cAlternateFileName="MJZ0H2~1.MP4")) returned 1
	[0131.516] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f053f0, ftCreationTime.dwHighDateTime=0x1d5f04e, ftLastAccessTime.dwLowDateTime=0x5e225350, ftLastAccessTime.dwHighDateTime=0x1d5ec59, ftLastWriteTime.dwLowDateTime=0x5e225350, ftLastWriteTime.dwHighDateTime=0x1d5ec59, nFileSizeHigh=0x0, nFileSizeLow=0x15431, dwReserved0=0x0, dwReserved1=0x0, cFileName="O9OdTEm_yEz.avi", cAlternateFileName="O9ODTE~1.AVI")) returned 1
	[0131.516] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a995e0, ftCreationTime.dwHighDateTime=0x1d5ea99, ftLastAccessTime.dwLowDateTime=0xb4900820, ftLastAccessTime.dwHighDateTime=0x1d5ed37, ftLastWriteTime.dwLowDateTime=0xb4900820, ftLastWriteTime.dwHighDateTime=0x1d5ed37, nFileSizeHigh=0x0, nFileSizeLow=0x6d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="qqmGP4aL0Fh2PyCtgFjT.swf", cAlternateFileName="QQMGP4~1.SWF")) returned 1
	[0131.516] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbff25240, ftCreationTime.dwHighDateTime=0x1d5ef0d, ftLastAccessTime.dwLowDateTime=0x86d93fa0, ftLastAccessTime.dwHighDateTime=0x1d5e742, ftLastWriteTime.dwLowDateTime=0x86d93fa0, ftLastWriteTime.dwHighDateTime=0x1d5e742, nFileSizeHigh=0x0, nFileSizeLow=0xd96, dwReserved0=0x0, dwReserved1=0x0, cFileName="vY6VlU7Si_7Mq.avi", cAlternateFileName="VY6VLU~1.AVI")) returned 1
	[0131.516] FindNextFileW (in: hFindFile=0xdd6068, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbff25240, ftCreationTime.dwHighDateTime=0x1d5ef0d, ftLastAccessTime.dwLowDateTime=0x86d93fa0, ftLastAccessTime.dwHighDateTime=0x1d5e742, ftLastWriteTime.dwLowDateTime=0x86d93fa0, ftLastWriteTime.dwHighDateTime=0x1d5e742, nFileSizeHigh=0x0, nFileSizeLow=0xd96, dwReserved0=0x0, dwReserved1=0x0, cFileName="vY6VlU7Si_7Mq.avi", cAlternateFileName="VY6VLU~1.AVI")) returned 0
	[0131.516] FindClose (in: hFindFile=0xdd6068 | out: hFindFile=0xdd6068) returned 1
	[0131.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0131.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0131.516] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30
	[0131.517] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv", nBufferLength=0x30, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv", lpFilePart=0x0) returned 0x2f
	[0131.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0131.517] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\agzhzcryl.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.517] GetFileType (hFile=0x2d0) returned 0x1
	[0131.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0131.517] GetFileType (hFile=0x2d0) returned 0x1
	[0131.517] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x64aa
	[0131.517] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a875e4, nNumberOfBytesToRead=0x64aa, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2a875e4*, lpNumberOfBytesRead=0xafe928*=0x64aa, lpOverlapped=0x0) returned 1
	[0131.517] CloseHandle (hObject=0x2d0) returned 1
	[0131.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0131.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0131.541] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30
	[0131.541] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv", nBufferLength=0x30, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv", lpFilePart=0x0) returned 0x2f
	[0131.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0131.541] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\agzhzcryl.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.542] GetFileType (hFile=0x2d0) returned 0x1
	[0131.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0131.543] GetFileType (hFile=0x2d0) returned 0x1
	[0131.543] WriteFile (in: hFile=0x2d0, lpBuffer=0x2af3b40*, nNumberOfBytesToWrite=0x64b0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2af3b40*, lpNumberOfBytesWritten=0xafe91c*=0x64b0, lpOverlapped=0x0) returned 1
	[0131.544] CloseHandle (hObject=0x2d0) returned 1
	[0131.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30
	[0131.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv", nBufferLength=0x30, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv", lpFilePart=0x0) returned 0x2f
	[0131.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0131.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv.rogue", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv.rogue", lpFilePart=0x0) returned 0x35
	[0131.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0131.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\agzhzcryl.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0493c00, ftCreationTime.dwHighDateTime=0x1d5e200, ftLastAccessTime.dwLowDateTime=0x73e9e120, ftLastAccessTime.dwHighDateTime=0x1d5f08d, ftLastWriteTime.dwLowDateTime=0xafaae5b1, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x64b0)) returned 1
	[0131.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0131.547] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\agzhzcryl.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\AgzHzcRyl.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\agzhzcryl.mkv.rogue")) returned 1
	[0131.548] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39
	[0131.548] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4", nBufferLength=0x39, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4", lpFilePart=0x0) returned 0x38
	[0131.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0131.548] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\drfxrurdnrnbjmu s5.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.548] GetFileType (hFile=0x2d0) returned 0x1
	[0131.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0131.548] GetFileType (hFile=0x2d0) returned 0x1
	[0131.548] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0xe9ac
	[0131.548] ReadFile (in: hFile=0x2d0, lpBuffer=0x2afa268, nNumberOfBytesToRead=0xe9ac, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2afa268*, lpNumberOfBytesRead=0xafe928*=0xe9ac, lpOverlapped=0x0) returned 1
	[0131.549] CloseHandle (hObject=0x2d0) returned 1
	[0131.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0131.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0131.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39
	[0131.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4", nBufferLength=0x39, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4", lpFilePart=0x0) returned 0x38
	[0131.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0131.590] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\drfxrurdnrnbjmu s5.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.592] GetFileType (hFile=0x2d0) returned 0x1
	[0131.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0131.592] GetFileType (hFile=0x2d0) returned 0x1
	[0131.592] WriteFile (in: hFile=0x2d0, lpBuffer=0x2b72d74*, nNumberOfBytesToWrite=0xe9b0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2b72d74*, lpNumberOfBytesWritten=0xafe91c*=0xe9b0, lpOverlapped=0x0) returned 1
	[0131.595] CloseHandle (hObject=0x2d0) returned 1
	[0131.606] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39
	[0131.606] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4", nBufferLength=0x39, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4", lpFilePart=0x0) returned 0x38
	[0131.606] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0131.606] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4.rogue", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4.rogue", lpFilePart=0x0) returned 0x3e
	[0131.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0131.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\drfxrurdnrnbjmu s5.mp4"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6756730, ftCreationTime.dwHighDateTime=0x1d5e566, ftLastAccessTime.dwLowDateTime=0xa8cb10, ftLastAccessTime.dwHighDateTime=0x1d5e564, ftLastWriteTime.dwLowDateTime=0xafb46f47, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xe9b0)) returned 1
	[0131.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0131.606] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\drfxrurdnrnbjmu s5.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\drFxrurDNRNBjMu S5.mp4.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\drfxrurdnrnbjmu s5.mp4.rogue")) returned 1
	[0131.607] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0131.607] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4", lpFilePart=0x0) returned 0x35
	[0131.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0131.607] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\ethixtqvqawtghr.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.607] GetFileType (hFile=0x2d0) returned 0x1
	[0131.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0131.608] GetFileType (hFile=0x2d0) returned 0x1
	[0131.608] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x95d
	[0131.608] ReadFile (in: hFile=0x2d0, lpBuffer=0x2b82328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2b82328*, lpNumberOfBytesRead=0xafe928*=0x95d, lpOverlapped=0x0) returned 1
	[0131.608] CloseHandle (hObject=0x2d0) returned 1
	[0131.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0131.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0131.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0131.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4", lpFilePart=0x0) returned 0x35
	[0131.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0131.636] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\ethixtqvqawtghr.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.638] GetFileType (hFile=0x2d0) returned 0x1
	[0131.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0131.638] GetFileType (hFile=0x2d0) returned 0x1
	[0131.638] WriteFile (in: hFile=0x2d0, lpBuffer=0x2bd3150*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0xafe8f0, lpOverlapped=0x0 | out: lpBuffer=0x2bd3150*, lpNumberOfBytesWritten=0xafe8f0*=0x960, lpOverlapped=0x0) returned 1
	[0131.639] CloseHandle (hObject=0x2d0) returned 1
	[0131.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0131.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4", lpFilePart=0x0) returned 0x35
	[0131.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c
	[0131.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4.rogue", nBufferLength=0x3c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4.rogue", lpFilePart=0x0) returned 0x3b
	[0131.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0131.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\ethixtqvqawtghr.mp4"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9db93b80, ftCreationTime.dwHighDateTime=0x1d5f0ca, ftLastAccessTime.dwLowDateTime=0xe73afed0, ftLastAccessTime.dwHighDateTime=0x1d5e4e3, ftLastWriteTime.dwLowDateTime=0xafb93401, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x960)) returned 1
	[0131.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0131.641] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\ethixtqvqawtghr.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\EtHixtQVQawTgHR.mp4.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\ethixtqvqawtghr.mp4.rogue")) returned 1
	[0131.642] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0131.642] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4", lpFilePart=0x0) returned 0x35
	[0131.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0131.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\lm3dqykkuitrx7w.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.642] GetFileType (hFile=0x2d0) returned 0x1
	[0131.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0131.642] GetFileType (hFile=0x2d0) returned 0x1
	[0131.642] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x17691
	[0131.644] ReadFile (in: hFile=0x2d0, lpBuffer=0x3bd6510, nNumberOfBytesToRead=0x17691, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x3bd6510*, lpNumberOfBytesRead=0xafe928*=0x17691, lpOverlapped=0x0) returned 1
	[0131.645] CloseHandle (hObject=0x2d0) returned 1
	[0131.713] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.713] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0131.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0131.713] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0131.713] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4", lpFilePart=0x0) returned 0x35
	[0131.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0131.713] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\lm3dqykkuitrx7w.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.715] GetFileType (hFile=0x2d0) returned 0x1
	[0131.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0131.715] GetFileType (hFile=0x2d0) returned 0x1
	[0131.715] WriteFile (in: hFile=0x2d0, lpBuffer=0x38d94c8*, nNumberOfBytesToWrite=0x176a0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x38d94c8*, lpNumberOfBytesWritten=0xafe91c*=0x176a0, lpOverlapped=0x0) returned 1
	[0131.718] CloseHandle (hObject=0x2d0) returned 1
	[0131.720] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0131.720] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4", lpFilePart=0x0) returned 0x35
	[0131.721] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c
	[0131.721] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4.rogue", nBufferLength=0x3c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4.rogue", lpFilePart=0x0) returned 0x3b
	[0131.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0131.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\lm3dqykkuitrx7w.mp4"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfd81c0, ftCreationTime.dwHighDateTime=0x1d5e7ce, ftLastAccessTime.dwLowDateTime=0x4fb7b2d0, ftLastAccessTime.dwHighDateTime=0x1d5e9e1, ftLastWriteTime.dwLowDateTime=0xafc52020, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x176a0)) returned 1
	[0131.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0131.721] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\lm3dqykkuitrx7w.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\lm3dqYKkuItRX7W.mp4.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\lm3dqykkuitrx7w.mp4.rogue")) returned 1
	[0131.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0131.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4", lpFilePart=0x0) returned 0x33
	[0131.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0131.722] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\m jz0h2iv6b4b.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.722] GetFileType (hFile=0x2d0) returned 0x1
	[0131.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0131.722] GetFileType (hFile=0x2d0) returned 0x1
	[0131.722] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x122f0
	[0131.722] ReadFile (in: hFile=0x2d0, lpBuffer=0x28fde8c, nNumberOfBytesToRead=0x122f0, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x28fde8c*, lpNumberOfBytesRead=0xafe928*=0x122f0, lpOverlapped=0x0) returned 1
	[0131.723] CloseHandle (hObject=0x2d0) returned 1
	[0131.822] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.822] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0131.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0131.822] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0131.822] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4", lpFilePart=0x0) returned 0x33
	[0131.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0131.823] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\m jz0h2iv6b4b.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.825] GetFileType (hFile=0x2d0) returned 0x1
	[0131.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0131.825] GetFileType (hFile=0x2d0) returned 0x1
	[0131.825] WriteFile (in: hFile=0x2d0, lpBuffer=0x29816e4*, nNumberOfBytesToWrite=0x12300, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x29816e4*, lpNumberOfBytesWritten=0xafe91c*=0x12300, lpOverlapped=0x0) returned 1
	[0131.827] CloseHandle (hObject=0x2d0) returned 1
	[0131.831] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0131.831] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4", lpFilePart=0x0) returned 0x33
	[0131.831] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0131.831] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4.rogue", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4.rogue", lpFilePart=0x0) returned 0x39
	[0131.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0131.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\m jz0h2iv6b4b.mp4"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bb5e260, ftCreationTime.dwHighDateTime=0x1d5ef26, ftLastAccessTime.dwLowDateTime=0x18534270, ftLastAccessTime.dwHighDateTime=0x1d5e5a2, ftLastWriteTime.dwLowDateTime=0xafd8384a, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x12300)) returned 1
	[0131.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0131.832] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\m jz0h2iv6b4b.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\M Jz0h2Iv6B4B.mp4.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\m jz0h2iv6b4b.mp4.rogue")) returned 1
	[0131.844] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0131.844] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi", lpFilePart=0x0) returned 0x31
	[0131.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0131.845] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\o9odtem_yez.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.845] GetFileType (hFile=0x2d0) returned 0x1
	[0131.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0131.845] GetFileType (hFile=0x2d0) returned 0x1
	[0131.845] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x15431
	[0131.845] ReadFile (in: hFile=0x2d0, lpBuffer=0x3941fd0, nNumberOfBytesToRead=0x15431, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x3941fd0*, lpNumberOfBytesRead=0xafe928*=0x15431, lpOverlapped=0x0) returned 1
	[0131.846] CloseHandle (hObject=0x2d0) returned 1
	[0131.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0131.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0131.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0131.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi", lpFilePart=0x0) returned 0x31
	[0131.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0131.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\o9odtem_yez.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.869] GetFileType (hFile=0x2d0) returned 0x1
	[0131.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0131.869] GetFileType (hFile=0x2d0) returned 0x1
	[0131.869] WriteFile (in: hFile=0x2d0, lpBuffer=0x39ac540*, nNumberOfBytesToWrite=0x15440, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x39ac540*, lpNumberOfBytesWritten=0xafe91c*=0x15440, lpOverlapped=0x0) returned 1
	[0131.871] CloseHandle (hObject=0x2d0) returned 1
	[0131.874] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32
	[0131.874] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi", nBufferLength=0x32, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi", lpFilePart=0x0) returned 0x31
	[0131.874] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38
	[0131.874] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi.rogue", nBufferLength=0x38, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi.rogue", lpFilePart=0x0) returned 0x37
	[0131.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0131.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\o9odtem_yez.avi"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f053f0, ftCreationTime.dwHighDateTime=0x1d5f04e, ftLastAccessTime.dwLowDateTime=0x5e225350, ftLastAccessTime.dwHighDateTime=0x1d5ec59, ftLastWriteTime.dwLowDateTime=0xafdcfbe7, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x15440)) returned 1
	[0131.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0131.874] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\o9odtem_yez.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\O9OdTEm_yEz.avi.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\o9odtem_yez.avi.rogue")) returned 1
	[0131.875] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0131.875] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi", lpFilePart=0x0) returned 0x33
	[0131.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0131.875] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\vy6vlu7si_7mq.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.875] GetFileType (hFile=0x2d0) returned 0x1
	[0131.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0131.875] GetFileType (hFile=0x2d0) returned 0x1
	[0131.875] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0xd96
	[0131.875] ReadFile (in: hFile=0x2d0, lpBuffer=0x29e1a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x29e1a88*, lpNumberOfBytesRead=0xafe928*=0xd96, lpOverlapped=0x0) returned 1
	[0131.875] CloseHandle (hObject=0x2d0) returned 1
	[0131.894] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.894] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0131.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0131.895] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0131.895] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi", lpFilePart=0x0) returned 0x33
	[0131.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0131.895] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\vy6vlu7si_7mq.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.896] GetFileType (hFile=0x2d0) returned 0x1
	[0131.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0131.896] GetFileType (hFile=0x2d0) returned 0x1
	[0131.896] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a33df4*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0xafe8f0, lpOverlapped=0x0 | out: lpBuffer=0x2a33df4*, lpNumberOfBytesWritten=0xafe8f0*=0xda0, lpOverlapped=0x0) returned 1
	[0131.897] CloseHandle (hObject=0x2d0) returned 1
	[0131.898] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0131.898] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi", lpFilePart=0x0) returned 0x33
	[0131.898] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0131.898] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi.rogue", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi.rogue", lpFilePart=0x0) returned 0x39
	[0131.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0131.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\vy6vlu7si_7mq.avi"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbff25240, ftCreationTime.dwHighDateTime=0x1d5ef0d, ftLastAccessTime.dwLowDateTime=0x86d93fa0, ftLastAccessTime.dwHighDateTime=0x1d5e742, ftLastWriteTime.dwLowDateTime=0xafe1bc1b, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1
	[0131.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0131.898] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\vy6vlu7si_7mq.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\7Xr-Oo23S8\\vY6VlU7Si_7Mq.avi.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\7xr-oo23s8\\vy6vlu7si_7mq.avi.rogue")) returned 1
	[0131.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0131.899] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.899] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR", lpFilePart=0x0) returned 0x2a
	[0131.899] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84f9d0, ftCreationTime.dwHighDateTime=0x1d5e20b, ftLastAccessTime.dwLowDateTime=0xbbd2bbd0, ftLastAccessTime.dwHighDateTime=0x1d5e0ff, ftLastWriteTime.dwLowDateTime=0xbbd2bbd0, ftLastWriteTime.dwHighDateTime=0x1d5e0ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd62e8
	[0131.899] FindNextFileW (in: hFindFile=0xdd62e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84f9d0, ftCreationTime.dwHighDateTime=0x1d5e20b, ftLastAccessTime.dwLowDateTime=0xbbd2bbd0, ftLastAccessTime.dwHighDateTime=0x1d5e0ff, ftLastWriteTime.dwLowDateTime=0xbbd2bbd0, ftLastWriteTime.dwHighDateTime=0x1d5e0ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.900] FindNextFileW (in: hFindFile=0xdd62e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c3a5250, ftCreationTime.dwHighDateTime=0x1d5e925, ftLastAccessTime.dwLowDateTime=0x7ef2fd70, ftLastAccessTime.dwHighDateTime=0x1d5e5db, ftLastWriteTime.dwLowDateTime=0x7ef2fd70, ftLastWriteTime.dwHighDateTime=0x1d5e5db, nFileSizeHigh=0x0, nFileSizeLow=0x12e4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="2XjwCPAVGl.mp4", cAlternateFileName="2XJWCP~1.MP4")) returned 1
	[0131.900] FindNextFileW (in: hFindFile=0xdd62e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcbe00e0, ftCreationTime.dwHighDateTime=0x1d5ea88, ftLastAccessTime.dwLowDateTime=0x143973f0, ftLastAccessTime.dwHighDateTime=0x1d5e951, ftLastWriteTime.dwLowDateTime=0x143973f0, ftLastWriteTime.dwHighDateTime=0x1d5e951, nFileSizeHigh=0x0, nFileSizeLow=0xebda, dwReserved0=0x0, dwReserved1=0x0, cFileName="6R BZRUGYh EPFJ.mkv", cAlternateFileName="6RBZRU~1.MKV")) returned 1
	[0131.900] FindNextFileW (in: hFindFile=0xdd62e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76742520, ftCreationTime.dwHighDateTime=0x1d5e4be, ftLastAccessTime.dwLowDateTime=0x7f93adc0, ftLastAccessTime.dwHighDateTime=0x1d5ee40, ftLastWriteTime.dwLowDateTime=0x7f93adc0, ftLastWriteTime.dwHighDateTime=0x1d5ee40, nFileSizeHigh=0x0, nFileSizeLow=0xb915, dwReserved0=0x0, dwReserved1=0x0, cFileName="M7B9bsemSkWI.mkv", cAlternateFileName="M7B9BS~1.MKV")) returned 1
	[0131.900] FindNextFileW (in: hFindFile=0xdd62e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa65ba0, ftCreationTime.dwHighDateTime=0x1d5ee1d, ftLastAccessTime.dwLowDateTime=0x303adc60, ftLastAccessTime.dwHighDateTime=0x1d5ec8f, ftLastWriteTime.dwLowDateTime=0x303adc60, ftLastWriteTime.dwHighDateTime=0x1d5ec8f, nFileSizeHigh=0x0, nFileSizeLow=0x16b02, dwReserved0=0x0, dwReserved1=0x0, cFileName="nvtu6aYMKrviy5.mkv", cAlternateFileName="NVTU6A~1.MKV")) returned 1
	[0131.900] FindNextFileW (in: hFindFile=0xdd62e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3edcc600, ftCreationTime.dwHighDateTime=0x1d5e381, ftLastAccessTime.dwLowDateTime=0x412143e0, ftLastAccessTime.dwHighDateTime=0x1d5e3e6, ftLastWriteTime.dwLowDateTime=0x412143e0, ftLastWriteTime.dwHighDateTime=0x1d5e3e6, nFileSizeHigh=0x0, nFileSizeLow=0x5930, dwReserved0=0x0, dwReserved1=0x0, cFileName="xllZGvifQz8x3GJrEK.swf", cAlternateFileName="XLLZGV~1.SWF")) returned 1
	[0131.901] FindNextFileW (in: hFindFile=0xdd62e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0e20e80, ftCreationTime.dwHighDateTime=0x1d5e930, ftLastAccessTime.dwLowDateTime=0xc2006600, ftLastAccessTime.dwHighDateTime=0x1d5eef2, ftLastWriteTime.dwLowDateTime=0xc2006600, ftLastWriteTime.dwHighDateTime=0x1d5eef2, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="yaAT0th b.mkv", cAlternateFileName="YAAT0T~1.MKV")) returned 1
	[0131.901] FindNextFileW (in: hFindFile=0xdd62e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.901] FindClose (in: hFindFile=0xdd62e8 | out: hFindFile=0xdd62e8) returned 1
	[0131.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0131.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0131.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0131.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR", lpFilePart=0x0) returned 0x2a
	[0131.901] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84f9d0, ftCreationTime.dwHighDateTime=0x1d5e20b, ftLastAccessTime.dwLowDateTime=0xbbd2bbd0, ftLastAccessTime.dwHighDateTime=0x1d5e0ff, ftLastWriteTime.dwLowDateTime=0xbbd2bbd0, ftLastWriteTime.dwHighDateTime=0x1d5e0ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6728
	[0131.901] FindNextFileW (in: hFindFile=0xdd6728, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84f9d0, ftCreationTime.dwHighDateTime=0x1d5e20b, ftLastAccessTime.dwLowDateTime=0xbbd2bbd0, ftLastAccessTime.dwHighDateTime=0x1d5e0ff, ftLastWriteTime.dwLowDateTime=0xbbd2bbd0, ftLastWriteTime.dwHighDateTime=0x1d5e0ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.902] FindNextFileW (in: hFindFile=0xdd6728, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c3a5250, ftCreationTime.dwHighDateTime=0x1d5e925, ftLastAccessTime.dwLowDateTime=0x7ef2fd70, ftLastAccessTime.dwHighDateTime=0x1d5e5db, ftLastWriteTime.dwLowDateTime=0x7ef2fd70, ftLastWriteTime.dwHighDateTime=0x1d5e5db, nFileSizeHigh=0x0, nFileSizeLow=0x12e4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="2XjwCPAVGl.mp4", cAlternateFileName="2XJWCP~1.MP4")) returned 1
	[0131.902] FindNextFileW (in: hFindFile=0xdd6728, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcbe00e0, ftCreationTime.dwHighDateTime=0x1d5ea88, ftLastAccessTime.dwLowDateTime=0x143973f0, ftLastAccessTime.dwHighDateTime=0x1d5e951, ftLastWriteTime.dwLowDateTime=0x143973f0, ftLastWriteTime.dwHighDateTime=0x1d5e951, nFileSizeHigh=0x0, nFileSizeLow=0xebda, dwReserved0=0x0, dwReserved1=0x0, cFileName="6R BZRUGYh EPFJ.mkv", cAlternateFileName="6RBZRU~1.MKV")) returned 1
	[0131.902] FindNextFileW (in: hFindFile=0xdd6728, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76742520, ftCreationTime.dwHighDateTime=0x1d5e4be, ftLastAccessTime.dwLowDateTime=0x7f93adc0, ftLastAccessTime.dwHighDateTime=0x1d5ee40, ftLastWriteTime.dwLowDateTime=0x7f93adc0, ftLastWriteTime.dwHighDateTime=0x1d5ee40, nFileSizeHigh=0x0, nFileSizeLow=0xb915, dwReserved0=0x0, dwReserved1=0x0, cFileName="M7B9bsemSkWI.mkv", cAlternateFileName="M7B9BS~1.MKV")) returned 1
	[0131.902] FindNextFileW (in: hFindFile=0xdd6728, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa65ba0, ftCreationTime.dwHighDateTime=0x1d5ee1d, ftLastAccessTime.dwLowDateTime=0x303adc60, ftLastAccessTime.dwHighDateTime=0x1d5ec8f, ftLastWriteTime.dwLowDateTime=0x303adc60, ftLastWriteTime.dwHighDateTime=0x1d5ec8f, nFileSizeHigh=0x0, nFileSizeLow=0x16b02, dwReserved0=0x0, dwReserved1=0x0, cFileName="nvtu6aYMKrviy5.mkv", cAlternateFileName="NVTU6A~1.MKV")) returned 1
	[0131.902] FindNextFileW (in: hFindFile=0xdd6728, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3edcc600, ftCreationTime.dwHighDateTime=0x1d5e381, ftLastAccessTime.dwLowDateTime=0x412143e0, ftLastAccessTime.dwHighDateTime=0x1d5e3e6, ftLastWriteTime.dwLowDateTime=0x412143e0, ftLastWriteTime.dwHighDateTime=0x1d5e3e6, nFileSizeHigh=0x0, nFileSizeLow=0x5930, dwReserved0=0x0, dwReserved1=0x0, cFileName="xllZGvifQz8x3GJrEK.swf", cAlternateFileName="XLLZGV~1.SWF")) returned 1
	[0131.903] FindNextFileW (in: hFindFile=0xdd6728, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0e20e80, ftCreationTime.dwHighDateTime=0x1d5e930, ftLastAccessTime.dwLowDateTime=0xc2006600, ftLastAccessTime.dwHighDateTime=0x1d5eef2, ftLastWriteTime.dwLowDateTime=0xc2006600, ftLastWriteTime.dwHighDateTime=0x1d5eef2, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="yaAT0th b.mkv", cAlternateFileName="YAAT0T~1.MKV")) returned 1
	[0131.903] FindNextFileW (in: hFindFile=0xdd6728, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0e20e80, ftCreationTime.dwHighDateTime=0x1d5e930, ftLastAccessTime.dwLowDateTime=0xc2006600, ftLastAccessTime.dwHighDateTime=0x1d5eef2, ftLastWriteTime.dwLowDateTime=0xc2006600, ftLastWriteTime.dwHighDateTime=0x1d5eef2, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="yaAT0th b.mkv", cAlternateFileName="YAAT0T~1.MKV")) returned 0
	[0131.903] FindClose (in: hFindFile=0xdd6728 | out: hFindFile=0xdd6728) returned 1
	[0131.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0131.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0131.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0131.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4", lpFilePart=0x0) returned 0x39
	[0131.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0131.903] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\2xjwcpavgl.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.904] GetFileType (hFile=0x2d0) returned 0x1
	[0131.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0131.904] GetFileType (hFile=0x2d0) returned 0x1
	[0131.904] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x12e4f
	[0131.904] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a36e8c, nNumberOfBytesToRead=0x12e4f, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2a36e8c*, lpNumberOfBytesRead=0xafe928*=0x12e4f, lpOverlapped=0x0) returned 1
	[0131.905] CloseHandle (hObject=0x2d0) returned 1
	[0131.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0131.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0131.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0131.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0131.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0131.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4", lpFilePart=0x0) returned 0x39
	[0131.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0131.930] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\2xjwcpavgl.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.932] GetFileType (hFile=0x2d0) returned 0x1
	[0131.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0131.932] GetFileType (hFile=0x2d0) returned 0x1
	[0131.932] WriteFile (in: hFile=0x2d0, lpBuffer=0x2abc77c*, nNumberOfBytesToWrite=0x12e50, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2abc77c*, lpNumberOfBytesWritten=0xafe91c*=0x12e50, lpOverlapped=0x0) returned 1
	[0131.935] CloseHandle (hObject=0x2d0) returned 1
	[0131.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0131.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4", lpFilePart=0x0) returned 0x39
	[0131.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40
	[0131.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4.rogue", nBufferLength=0x40, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4.rogue", lpFilePart=0x0) returned 0x3f
	[0131.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0131.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\2xjwcpavgl.mp4"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c3a5250, ftCreationTime.dwHighDateTime=0x1d5e925, ftLastAccessTime.dwLowDateTime=0x7ef2fd70, ftLastAccessTime.dwHighDateTime=0x1d5e5db, ftLastWriteTime.dwLowDateTime=0xafe680ea, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x12e50)) returned 1
	[0131.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0131.939] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\2xjwcpavgl.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\2XjwCPAVGl.mp4.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\2xjwcpavgl.mp4.rogue")) returned 1
	[0131.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0131.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv", lpFilePart=0x0) returned 0x3e
	[0131.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0131.940] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\6r bzrugyh epfj.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0131.941] GetFileType (hFile=0x2d0) returned 0x1
	[0131.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0131.941] GetFileType (hFile=0x2d0) returned 0x1
	[0131.941] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0xebda
	[0131.941] ReadFile (in: hFile=0x2d0, lpBuffer=0x2acf854, nNumberOfBytesToRead=0xebda, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2acf854*, lpNumberOfBytesRead=0xafe928*=0xebda, lpOverlapped=0x0) returned 1
	[0131.942] CloseHandle (hObject=0x2d0) returned 1
	[0132.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0132.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0132.005] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0132.005] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv", lpFilePart=0x0) returned 0x3e
	[0132.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0132.005] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\6r bzrugyh epfj.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.007] GetFileType (hFile=0x2d0) returned 0x1
	[0132.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0132.007] GetFileType (hFile=0x2d0) returned 0x1
	[0132.007] WriteFile (in: hFile=0x2d0, lpBuffer=0x2958070*, nNumberOfBytesToWrite=0xebe0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2958070*, lpNumberOfBytesWritten=0xafe91c*=0xebe0, lpOverlapped=0x0) returned 1
	[0132.009] CloseHandle (hObject=0x2d0) returned 1
	[0132.012] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0132.012] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv", lpFilePart=0x0) returned 0x3e
	[0132.012] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45
	[0132.012] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv.rogue", nBufferLength=0x45, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv.rogue", lpFilePart=0x0) returned 0x44
	[0132.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0132.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\6r bzrugyh epfj.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcbe00e0, ftCreationTime.dwHighDateTime=0x1d5ea88, ftLastAccessTime.dwLowDateTime=0x143973f0, ftLastAccessTime.dwHighDateTime=0x1d5e951, ftLastWriteTime.dwLowDateTime=0xaff2707c, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xebe0)) returned 1
	[0132.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0132.013] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\6r bzrugyh epfj.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\6R BZRUGYh EPFJ.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\6r bzrugyh epfj.mkv.rogue")) returned 1
	[0132.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c
	[0132.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv", nBufferLength=0x3c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv", lpFilePart=0x0) returned 0x3b
	[0132.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.014] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\m7b9bsemskwi.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.014] GetFileType (hFile=0x2d0) returned 0x1
	[0132.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.014] GetFileType (hFile=0x2d0) returned 0x1
	[0132.014] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0xb915
	[0132.015] ReadFile (in: hFile=0x2d0, lpBuffer=0x2966ee8, nNumberOfBytesToRead=0xb915, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2966ee8*, lpNumberOfBytesRead=0xafe928*=0xb915, lpOverlapped=0x0) returned 1
	[0132.016] CloseHandle (hObject=0x2d0) returned 1
	[0132.042] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.042] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0132.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0132.043] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c
	[0132.043] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv", nBufferLength=0x3c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv", lpFilePart=0x0) returned 0x3b
	[0132.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0132.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\m7b9bsemskwi.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.045] GetFileType (hFile=0x2d0) returned 0x1
	[0132.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0132.045] GetFileType (hFile=0x2d0) returned 0x1
	[0132.045] WriteFile (in: hFile=0x2d0, lpBuffer=0x29d69a4*, nNumberOfBytesToWrite=0xb920, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x29d69a4*, lpNumberOfBytesWritten=0xafe91c*=0xb920, lpOverlapped=0x0) returned 1
	[0132.047] CloseHandle (hObject=0x2d0) returned 1
	[0132.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c
	[0132.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv", nBufferLength=0x3c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv", lpFilePart=0x0) returned 0x3b
	[0132.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42
	[0132.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv.rogue", nBufferLength=0x42, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv.rogue", lpFilePart=0x0) returned 0x41
	[0132.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0132.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\m7b9bsemskwi.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76742520, ftCreationTime.dwHighDateTime=0x1d5e4be, ftLastAccessTime.dwLowDateTime=0x7f93adc0, ftLastAccessTime.dwHighDateTime=0x1d5ee40, ftLastWriteTime.dwLowDateTime=0xaff9b7ba, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xb920)) returned 1
	[0132.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0132.051] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\m7b9bsemskwi.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\M7B9bsemSkWI.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\m7b9bsemskwi.mkv.rogue")) returned 1
	[0132.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e
	[0132.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv", nBufferLength=0x3e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv", lpFilePart=0x0) returned 0x3d
	[0132.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.052] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\nvtu6aymkrviy5.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.052] GetFileType (hFile=0x2d0) returned 0x1
	[0132.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.052] GetFileType (hFile=0x2d0) returned 0x1
	[0132.053] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x16b02
	[0132.053] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a1c040, nNumberOfBytesToRead=0x16b02, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x3a1c040*, lpNumberOfBytesRead=0xafe928*=0x16b02, lpOverlapped=0x0) returned 1
	[0132.054] CloseHandle (hObject=0x2d0) returned 1
	[0132.086] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.086] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0132.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0132.086] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e
	[0132.086] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv", nBufferLength=0x3e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv", lpFilePart=0x0) returned 0x3d
	[0132.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0132.087] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\nvtu6aymkrviy5.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.089] GetFileType (hFile=0x2d0) returned 0x1
	[0132.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0132.089] GetFileType (hFile=0x2d0) returned 0x1
	[0132.089] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a8d7c0*, nNumberOfBytesToWrite=0x16b10, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x3a8d7c0*, lpNumberOfBytesWritten=0xafe91c*=0x16b10, lpOverlapped=0x0) returned 1
	[0132.092] CloseHandle (hObject=0x2d0) returned 1
	[0132.095] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e
	[0132.095] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv", nBufferLength=0x3e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv", lpFilePart=0x0) returned 0x3d
	[0132.095] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44
	[0132.096] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv.rogue", nBufferLength=0x44, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv.rogue", lpFilePart=0x0) returned 0x43
	[0132.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0132.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\nvtu6aymkrviy5.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa65ba0, ftCreationTime.dwHighDateTime=0x1d5ee1d, ftLastAccessTime.dwLowDateTime=0x303adc60, ftLastAccessTime.dwHighDateTime=0x1d5ec8f, ftLastWriteTime.dwLowDateTime=0xaffe5820, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x16b10)) returned 1
	[0132.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0132.096] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\nvtu6aymkrviy5.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\nvtu6aYMKrviy5.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\nvtu6aymkrviy5.mkv.rogue")) returned 1
	[0132.097] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39
	[0132.097] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv", nBufferLength=0x39, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv", lpFilePart=0x0) returned 0x38
	[0132.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\yaat0th b.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.098] GetFileType (hFile=0x2d0) returned 0x1
	[0132.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.098] GetFileType (hFile=0x2d0) returned 0x1
	[0132.098] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x4e61
	[0132.098] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a2f5f4, nNumberOfBytesToRead=0x4e61, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2a2f5f4*, lpNumberOfBytesRead=0xafe928*=0x4e61, lpOverlapped=0x0) returned 1
	[0132.099] CloseHandle (hObject=0x2d0) returned 1
	[0132.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0132.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0132.126] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39
	[0132.126] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv", nBufferLength=0x39, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv", lpFilePart=0x0) returned 0x38
	[0132.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0132.126] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\yaat0th b.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.128] GetFileType (hFile=0x2d0) returned 0x1
	[0132.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0132.129] GetFileType (hFile=0x2d0) returned 0x1
	[0132.129] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a94c10*, nNumberOfBytesToWrite=0x4e70, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2a94c10*, lpNumberOfBytesWritten=0xafe91c*=0x4e70, lpOverlapped=0x0) returned 1
	[0132.130] CloseHandle (hObject=0x2d0) returned 1
	[0132.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39
	[0132.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv", nBufferLength=0x39, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv", lpFilePart=0x0) returned 0x38
	[0132.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0132.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv.rogue", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv.rogue", lpFilePart=0x0) returned 0x3e
	[0132.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0132.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\yaat0th b.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0e20e80, ftCreationTime.dwHighDateTime=0x1d5e930, ftLastAccessTime.dwLowDateTime=0xc2006600, ftLastAccessTime.dwHighDateTime=0x1d5eef2, ftLastWriteTime.dwLowDateTime=0xb0057f07, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x4e70)) returned 1
	[0132.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0132.133] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\yaat0th b.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\Aix-E96OYhF8MvO_8sR\\yaAT0th b.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\aix-e96oyhf8mvo_8sr\\yaat0th b.mkv.rogue")) returned 1
	[0132.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0132.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0132.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02", lpFilePart=0x0) returned 0x2b
	[0132.134] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c3a7f20, ftCreationTime.dwHighDateTime=0x1d5e42b, ftLastAccessTime.dwLowDateTime=0xffe128f0, ftLastAccessTime.dwHighDateTime=0x1d5ef61, ftLastWriteTime.dwLowDateTime=0xffe128f0, ftLastWriteTime.dwHighDateTime=0x1d5ef61, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd65a8
	[0132.134] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c3a7f20, ftCreationTime.dwHighDateTime=0x1d5e42b, ftLastAccessTime.dwLowDateTime=0xffe128f0, ftLastAccessTime.dwHighDateTime=0x1d5ef61, ftLastWriteTime.dwLowDateTime=0xffe128f0, ftLastWriteTime.dwHighDateTime=0x1d5ef61, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.135] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2334a40, ftCreationTime.dwHighDateTime=0x1d5e119, ftLastAccessTime.dwLowDateTime=0x7f7500f0, ftLastAccessTime.dwHighDateTime=0x1d5e797, ftLastWriteTime.dwLowDateTime=0x7f7500f0, ftLastWriteTime.dwHighDateTime=0x1d5e797, nFileSizeHigh=0x0, nFileSizeLow=0xe78f, dwReserved0=0x0, dwReserved1=0x0, cFileName="D2gXAd6g5HihB-C_.mp4", cAlternateFileName="D2GXAD~1.MP4")) returned 1
	[0132.135] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2b63a0, ftCreationTime.dwHighDateTime=0x1d5e56b, ftLastAccessTime.dwLowDateTime=0x96750ba0, ftLastAccessTime.dwHighDateTime=0x1d5e621, ftLastWriteTime.dwLowDateTime=0x96750ba0, ftLastWriteTime.dwHighDateTime=0x1d5e621, nFileSizeHigh=0x0, nFileSizeLow=0x78f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="jLgq6hbFBYS9PACqwheg.mkv", cAlternateFileName="JLGQ6H~1.MKV")) returned 1
	[0132.135] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a6c030, ftCreationTime.dwHighDateTime=0x1d5e385, ftLastAccessTime.dwLowDateTime=0xb7e09ac0, ftLastAccessTime.dwHighDateTime=0x1d5e257, ftLastWriteTime.dwLowDateTime=0xb7e09ac0, ftLastWriteTime.dwHighDateTime=0x1d5e257, nFileSizeHigh=0x0, nFileSizeLow=0x3be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SsNZMhAGzFGcFht.avi", cAlternateFileName="SSNZMH~1.AVI")) returned 1
	[0132.136] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19f10140, ftCreationTime.dwHighDateTime=0x1d5e510, ftLastAccessTime.dwLowDateTime=0xddb6b800, ftLastAccessTime.dwHighDateTime=0x1d5ee88, ftLastWriteTime.dwLowDateTime=0xddb6b800, ftLastWriteTime.dwHighDateTime=0x1d5ee88, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uEHG_S2h", cAlternateFileName="")) returned 1
	[0132.136] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a337370, ftCreationTime.dwHighDateTime=0x1d5e6e2, ftLastAccessTime.dwLowDateTime=0xc3842c00, ftLastAccessTime.dwHighDateTime=0x1d5ee93, ftLastWriteTime.dwLowDateTime=0xc3842c00, ftLastWriteTime.dwHighDateTime=0x1d5ee93, nFileSizeHigh=0x0, nFileSizeLow=0x10af8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLMUxr80Ingogub.swf", cAlternateFileName="UMLMUX~1.SWF")) returned 1
	[0132.136] FindNextFileW (in: hFindFile=0xdd65a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.136] FindClose (in: hFindFile=0xdd65a8 | out: hFindFile=0xdd65a8) returned 1
	[0132.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0132.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0132.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0132.137] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c
	[0132.137] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02", nBufferLength=0x2c, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02", lpFilePart=0x0) returned 0x2b
	[0132.137] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c3a7f20, ftCreationTime.dwHighDateTime=0x1d5e42b, ftLastAccessTime.dwLowDateTime=0xffe128f0, ftLastAccessTime.dwHighDateTime=0x1d5ef61, ftLastWriteTime.dwLowDateTime=0xffe128f0, ftLastWriteTime.dwHighDateTime=0x1d5ef61, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6128
	[0132.137] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c3a7f20, ftCreationTime.dwHighDateTime=0x1d5e42b, ftLastAccessTime.dwLowDateTime=0xffe128f0, ftLastAccessTime.dwHighDateTime=0x1d5ef61, ftLastWriteTime.dwLowDateTime=0xffe128f0, ftLastWriteTime.dwHighDateTime=0x1d5ef61, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.138] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2334a40, ftCreationTime.dwHighDateTime=0x1d5e119, ftLastAccessTime.dwLowDateTime=0x7f7500f0, ftLastAccessTime.dwHighDateTime=0x1d5e797, ftLastWriteTime.dwLowDateTime=0x7f7500f0, ftLastWriteTime.dwHighDateTime=0x1d5e797, nFileSizeHigh=0x0, nFileSizeLow=0xe78f, dwReserved0=0x0, dwReserved1=0x0, cFileName="D2gXAd6g5HihB-C_.mp4", cAlternateFileName="D2GXAD~1.MP4")) returned 1
	[0132.138] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2b63a0, ftCreationTime.dwHighDateTime=0x1d5e56b, ftLastAccessTime.dwLowDateTime=0x96750ba0, ftLastAccessTime.dwHighDateTime=0x1d5e621, ftLastWriteTime.dwLowDateTime=0x96750ba0, ftLastWriteTime.dwHighDateTime=0x1d5e621, nFileSizeHigh=0x0, nFileSizeLow=0x78f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="jLgq6hbFBYS9PACqwheg.mkv", cAlternateFileName="JLGQ6H~1.MKV")) returned 1
	[0132.138] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a6c030, ftCreationTime.dwHighDateTime=0x1d5e385, ftLastAccessTime.dwLowDateTime=0xb7e09ac0, ftLastAccessTime.dwHighDateTime=0x1d5e257, ftLastWriteTime.dwLowDateTime=0xb7e09ac0, ftLastWriteTime.dwHighDateTime=0x1d5e257, nFileSizeHigh=0x0, nFileSizeLow=0x3be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SsNZMhAGzFGcFht.avi", cAlternateFileName="SSNZMH~1.AVI")) returned 1
	[0132.139] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19f10140, ftCreationTime.dwHighDateTime=0x1d5e510, ftLastAccessTime.dwLowDateTime=0xddb6b800, ftLastAccessTime.dwHighDateTime=0x1d5ee88, ftLastWriteTime.dwLowDateTime=0xddb6b800, ftLastWriteTime.dwHighDateTime=0x1d5ee88, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uEHG_S2h", cAlternateFileName="")) returned 1
	[0132.139] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a337370, ftCreationTime.dwHighDateTime=0x1d5e6e2, ftLastAccessTime.dwLowDateTime=0xc3842c00, ftLastAccessTime.dwHighDateTime=0x1d5ee93, ftLastWriteTime.dwLowDateTime=0xc3842c00, ftLastWriteTime.dwHighDateTime=0x1d5ee93, nFileSizeHigh=0x0, nFileSizeLow=0x10af8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLMUxr80Ingogub.swf", cAlternateFileName="UMLMUX~1.SWF")) returned 1
	[0132.139] FindNextFileW (in: hFindFile=0xdd6128, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a337370, ftCreationTime.dwHighDateTime=0x1d5e6e2, ftLastAccessTime.dwLowDateTime=0xc3842c00, ftLastAccessTime.dwHighDateTime=0x1d5ee93, ftLastWriteTime.dwLowDateTime=0xc3842c00, ftLastWriteTime.dwHighDateTime=0x1d5ee93, nFileSizeHigh=0x0, nFileSizeLow=0x10af8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLMUxr80Ingogub.swf", cAlternateFileName="UMLMUX~1.SWF")) returned 0
	[0132.140] FindClose (in: hFindFile=0xdd6128 | out: hFindFile=0xdd6128) returned 1
	[0132.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0132.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0132.140] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41
	[0132.140] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4", nBufferLength=0x41, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4", lpFilePart=0x0) returned 0x40
	[0132.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.140] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\d2gxad6g5hihb-c_.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.141] GetFileType (hFile=0x2d0) returned 0x1
	[0132.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.141] GetFileType (hFile=0x2d0) returned 0x1
	[0132.141] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0xe78f
	[0132.141] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a9b984, nNumberOfBytesToRead=0xe78f, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x2a9b984*, lpNumberOfBytesRead=0xafe928*=0xe78f, lpOverlapped=0x0) returned 1
	[0132.143] CloseHandle (hObject=0x2d0) returned 1
	[0132.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0132.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0132.168] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41
	[0132.168] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4", nBufferLength=0x41, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4", lpFilePart=0x0) returned 0x40
	[0132.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0132.168] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\d2gxad6g5hihb-c_.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.169] GetFileType (hFile=0x2d0) returned 0x1
	[0132.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0132.169] GetFileType (hFile=0x2d0) returned 0x1
	[0132.169] WriteFile (in: hFile=0x2d0, lpBuffer=0x291c7fc*, nNumberOfBytesToWrite=0xe790, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x291c7fc*, lpNumberOfBytesWritten=0xafe91c*=0xe790, lpOverlapped=0x0) returned 1
	[0132.171] CloseHandle (hObject=0x2d0) returned 1
	[0132.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41
	[0132.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4", nBufferLength=0x41, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4", lpFilePart=0x0) returned 0x40
	[0132.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47
	[0132.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4.rogue", nBufferLength=0x47, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4.rogue", lpFilePart=0x0) returned 0x46
	[0132.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0132.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\d2gxad6g5hihb-c_.mp4"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2334a40, ftCreationTime.dwHighDateTime=0x1d5e119, ftLastAccessTime.dwLowDateTime=0x7f7500f0, ftLastAccessTime.dwHighDateTime=0x1d5e797, ftLastWriteTime.dwLowDateTime=0xb00a43db, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xe790)) returned 1
	[0132.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0132.173] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\d2gxad6g5hihb-c_.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\D2gXAd6g5HihB-C_.mp4.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\d2gxad6g5hihb-c_.mp4.rogue")) returned 1
	[0132.174] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45
	[0132.174] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv", nBufferLength=0x45, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv", lpFilePart=0x0) returned 0x44
	[0132.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\jlgq6hbfbys9pacqwheg.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.174] GetFileType (hFile=0x2d0) returned 0x1
	[0132.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.175] GetFileType (hFile=0x2d0) returned 0x1
	[0132.175] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x78f2
	[0132.175] ReadFile (in: hFile=0x2d0, lpBuffer=0x292b23c, nNumberOfBytesToRead=0x78f2, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x292b23c*, lpNumberOfBytesRead=0xafe928*=0x78f2, lpOverlapped=0x0) returned 1
	[0132.176] CloseHandle (hObject=0x2d0) returned 1
	[0132.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0132.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0132.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45
	[0132.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv", nBufferLength=0x45, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv", lpFilePart=0x0) returned 0x44
	[0132.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0132.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\jlgq6hbfbys9pacqwheg.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.237] GetFileType (hFile=0x2d0) returned 0x1
	[0132.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0132.237] GetFileType (hFile=0x2d0) returned 0x1
	[0132.237] WriteFile (in: hFile=0x2d0, lpBuffer=0x299de84*, nNumberOfBytesToWrite=0x7900, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x299de84*, lpNumberOfBytesWritten=0xafe91c*=0x7900, lpOverlapped=0x0) returned 1
	[0132.239] CloseHandle (hObject=0x2d0) returned 1
	[0132.240] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45
	[0132.241] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv", nBufferLength=0x45, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv", lpFilePart=0x0) returned 0x44
	[0132.241] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b
	[0132.241] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv.rogue", nBufferLength=0x4b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv.rogue", lpFilePart=0x0) returned 0x4a
	[0132.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0132.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\jlgq6hbfbys9pacqwheg.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2b63a0, ftCreationTime.dwHighDateTime=0x1d5e56b, ftLastAccessTime.dwLowDateTime=0x96750ba0, ftLastAccessTime.dwHighDateTime=0x1d5e621, ftLastWriteTime.dwLowDateTime=0xb0162f95, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x7900)) returned 1
	[0132.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0132.241] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\jlgq6hbfbys9pacqwheg.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\jLgq6hbFBYS9PACqwheg.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\jlgq6hbfbys9pacqwheg.mkv.rogue")) returned 1
	[0132.242] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40
	[0132.242] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi", nBufferLength=0x40, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi", lpFilePart=0x0) returned 0x3f
	[0132.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.242] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\ssnzmhagzfgcfht.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.242] GetFileType (hFile=0x2d0) returned 0x1
	[0132.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.242] GetFileType (hFile=0x2d0) returned 0x1
	[0132.242] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x3be2
	[0132.242] ReadFile (in: hFile=0x2d0, lpBuffer=0x29a5a38, nNumberOfBytesToRead=0x3be2, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x29a5a38*, lpNumberOfBytesRead=0xafe928*=0x3be2, lpOverlapped=0x0) returned 1
	[0132.243] CloseHandle (hObject=0x2d0) returned 1
	[0132.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0132.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0132.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40
	[0132.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi", nBufferLength=0x40, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi", lpFilePart=0x0) returned 0x3f
	[0132.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0132.261] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\ssnzmhagzfgcfht.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.262] GetFileType (hFile=0x2d0) returned 0x1
	[0132.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0132.262] GetFileType (hFile=0x2d0) returned 0x1
	[0132.262] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a053d4*, nNumberOfBytesToWrite=0x3bf0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2a053d4*, lpNumberOfBytesWritten=0xafe91c*=0x3bf0, lpOverlapped=0x0) returned 1
	[0132.263] CloseHandle (hObject=0x2d0) returned 1
	[0132.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40
	[0132.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi", nBufferLength=0x40, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi", lpFilePart=0x0) returned 0x3f
	[0132.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46
	[0132.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi.rogue", nBufferLength=0x46, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi.rogue", lpFilePart=0x0) returned 0x45
	[0132.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0132.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\ssnzmhagzfgcfht.avi"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a6c030, ftCreationTime.dwHighDateTime=0x1d5e385, ftLastAccessTime.dwLowDateTime=0xb7e09ac0, ftLastAccessTime.dwHighDateTime=0x1d5e257, ftLastWriteTime.dwLowDateTime=0xb01892b5, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x3bf0)) returned 1
	[0132.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0132.265] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\ssnzmhagzfgcfht.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\SsNZMhAGzFGcFht.avi.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\ssnzmhagzfgcfht.avi.rogue")) returned 1
	[0132.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0132.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0132.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h", lpFilePart=0x0) returned 0x34
	[0132.266] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19f10140, ftCreationTime.dwHighDateTime=0x1d5e510, ftLastAccessTime.dwLowDateTime=0xddb6b800, ftLastAccessTime.dwHighDateTime=0x1d5ee88, ftLastWriteTime.dwLowDateTime=0xddb6b800, ftLastWriteTime.dwHighDateTime=0x1d5ee88, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd61a8
	[0132.266] FindNextFileW (in: hFindFile=0xdd61a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19f10140, ftCreationTime.dwHighDateTime=0x1d5e510, ftLastAccessTime.dwLowDateTime=0xddb6b800, ftLastAccessTime.dwHighDateTime=0x1d5ee88, ftLastWriteTime.dwLowDateTime=0xddb6b800, ftLastWriteTime.dwHighDateTime=0x1d5ee88, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.267] FindNextFileW (in: hFindFile=0xdd61a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3bd5f20, ftCreationTime.dwHighDateTime=0x1d5f07b, ftLastAccessTime.dwLowDateTime=0x139e1230, ftLastAccessTime.dwHighDateTime=0x1d5f03f, ftLastWriteTime.dwLowDateTime=0x139e1230, ftLastWriteTime.dwHighDateTime=0x1d5f03f, nFileSizeHigh=0x0, nFileSizeLow=0x1412e, dwReserved0=0x0, dwReserved1=0x0, cFileName="E dWla1jmx618.flv", cAlternateFileName="EDWLA1~1.FLV")) returned 1
	[0132.267] FindNextFileW (in: hFindFile=0xdd61a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b688280, ftCreationTime.dwHighDateTime=0x1d5e7cf, ftLastAccessTime.dwLowDateTime=0xb299cd90, ftLastAccessTime.dwHighDateTime=0x1d5e29b, ftLastWriteTime.dwLowDateTime=0xb299cd90, ftLastWriteTime.dwHighDateTime=0x1d5e29b, nFileSizeHigh=0x0, nFileSizeLow=0xd31b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meQoK9OMNnY.avi", cAlternateFileName="MEQOK9~1.AVI")) returned 1
	[0132.267] FindNextFileW (in: hFindFile=0xdd61a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9c3e660, ftCreationTime.dwHighDateTime=0x1d5e3c7, ftLastAccessTime.dwLowDateTime=0x6f06930, ftLastAccessTime.dwHighDateTime=0x1d5e0bc, ftLastWriteTime.dwLowDateTime=0x6f06930, ftLastWriteTime.dwHighDateTime=0x1d5e0bc, nFileSizeHigh=0x0, nFileSizeLow=0x5acf, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Exqhr8c-4_zTfaVMnNj.mp4", cAlternateFileName="_EXQHR~1.MP4")) returned 1
	[0132.268] FindNextFileW (in: hFindFile=0xdd61a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.268] FindClose (in: hFindFile=0xdd61a8 | out: hFindFile=0xdd61a8) returned 1
	[0132.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0132.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0132.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0132.269] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35
	[0132.269] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h", nBufferLength=0x35, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h", lpFilePart=0x0) returned 0x34
	[0132.269] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19f10140, ftCreationTime.dwHighDateTime=0x1d5e510, ftLastAccessTime.dwLowDateTime=0xddb6b800, ftLastAccessTime.dwHighDateTime=0x1d5ee88, ftLastWriteTime.dwLowDateTime=0xddb6b800, ftLastWriteTime.dwHighDateTime=0x1d5ee88, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd67e8
	[0132.269] FindNextFileW (in: hFindFile=0xdd67e8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19f10140, ftCreationTime.dwHighDateTime=0x1d5e510, ftLastAccessTime.dwLowDateTime=0xddb6b800, ftLastAccessTime.dwHighDateTime=0x1d5ee88, ftLastWriteTime.dwLowDateTime=0xddb6b800, ftLastWriteTime.dwHighDateTime=0x1d5ee88, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.270] FindNextFileW (in: hFindFile=0xdd67e8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3bd5f20, ftCreationTime.dwHighDateTime=0x1d5f07b, ftLastAccessTime.dwLowDateTime=0x139e1230, ftLastAccessTime.dwHighDateTime=0x1d5f03f, ftLastWriteTime.dwLowDateTime=0x139e1230, ftLastWriteTime.dwHighDateTime=0x1d5f03f, nFileSizeHigh=0x0, nFileSizeLow=0x1412e, dwReserved0=0x0, dwReserved1=0x0, cFileName="E dWla1jmx618.flv", cAlternateFileName="EDWLA1~1.FLV")) returned 1
	[0132.270] FindNextFileW (in: hFindFile=0xdd67e8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b688280, ftCreationTime.dwHighDateTime=0x1d5e7cf, ftLastAccessTime.dwLowDateTime=0xb299cd90, ftLastAccessTime.dwHighDateTime=0x1d5e29b, ftLastWriteTime.dwLowDateTime=0xb299cd90, ftLastWriteTime.dwHighDateTime=0x1d5e29b, nFileSizeHigh=0x0, nFileSizeLow=0xd31b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meQoK9OMNnY.avi", cAlternateFileName="MEQOK9~1.AVI")) returned 1
	[0132.270] FindNextFileW (in: hFindFile=0xdd67e8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9c3e660, ftCreationTime.dwHighDateTime=0x1d5e3c7, ftLastAccessTime.dwLowDateTime=0x6f06930, ftLastAccessTime.dwHighDateTime=0x1d5e0bc, ftLastWriteTime.dwLowDateTime=0x6f06930, ftLastWriteTime.dwHighDateTime=0x1d5e0bc, nFileSizeHigh=0x0, nFileSizeLow=0x5acf, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Exqhr8c-4_zTfaVMnNj.mp4", cAlternateFileName="_EXQHR~1.MP4")) returned 1
	[0132.270] FindNextFileW (in: hFindFile=0xdd67e8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9c3e660, ftCreationTime.dwHighDateTime=0x1d5e3c7, ftLastAccessTime.dwLowDateTime=0x6f06930, ftLastAccessTime.dwHighDateTime=0x1d5e0bc, ftLastWriteTime.dwLowDateTime=0x6f06930, ftLastWriteTime.dwHighDateTime=0x1d5e0bc, nFileSizeHigh=0x0, nFileSizeLow=0x5acf, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Exqhr8c-4_zTfaVMnNj.mp4", cAlternateFileName="_EXQHR~1.MP4")) returned 0
	[0132.270] FindClose (in: hFindFile=0xdd67e8 | out: hFindFile=0xdd67e8) returned 1
	[0132.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0132.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0132.271] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45
	[0132.271] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi", nBufferLength=0x45, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi", lpFilePart=0x0) returned 0x44
	[0132.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0132.271] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\uehg_s2h\\meqok9omnny.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.271] GetFileType (hFile=0x2d0) returned 0x1
	[0132.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0132.271] GetFileType (hFile=0x2d0) returned 0x1
	[0132.271] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0xd31b
	[0132.271] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a0aad8, nNumberOfBytesToRead=0xd31b, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x2a0aad8*, lpNumberOfBytesRead=0xafe8b4*=0xd31b, lpOverlapped=0x0) returned 1
	[0132.272] CloseHandle (hObject=0x2d0) returned 1
	[0132.292] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.292] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.292] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45
	[0132.292] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi", nBufferLength=0x45, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi", lpFilePart=0x0) returned 0x44
	[0132.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0132.292] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\uehg_s2h\\meqok9omnny.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.294] GetFileType (hFile=0x2d0) returned 0x1
	[0132.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0132.294] GetFileType (hFile=0x2d0) returned 0x1
	[0132.294] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a7f238*, nNumberOfBytesToWrite=0xd320, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x2a7f238*, lpNumberOfBytesWritten=0xafe8a8*=0xd320, lpOverlapped=0x0) returned 1
	[0132.296] CloseHandle (hObject=0x2d0) returned 1
	[0132.298] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45
	[0132.298] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi", nBufferLength=0x45, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi", lpFilePart=0x0) returned 0x44
	[0132.298] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b
	[0132.298] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi.rogue", nBufferLength=0x4b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi.rogue", lpFilePart=0x0) returned 0x4a
	[0132.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0132.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\uehg_s2h\\meqok9omnny.avi"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b688280, ftCreationTime.dwHighDateTime=0x1d5e7cf, ftLastAccessTime.dwLowDateTime=0xb299cd90, ftLastAccessTime.dwHighDateTime=0x1d5e29b, ftLastWriteTime.dwLowDateTime=0xb01d5bbd, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xd320)) returned 1
	[0132.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0132.299] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\uehg_s2h\\meqok9omnny.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\meQoK9OMNnY.avi.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\uehg_s2h\\meqok9omnny.avi.rogue")) returned 1
	[0132.303] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e
	[0132.303] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4", nBufferLength=0x4e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4", lpFilePart=0x0) returned 0x4d
	[0132.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0132.303] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\uehg_s2h\\_exqhr8c-4_ztfavmnnj.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.303] GetFileType (hFile=0x2d0) returned 0x1
	[0132.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0132.304] GetFileType (hFile=0x2d0) returned 0x1
	[0132.304] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0x5acf
	[0132.304] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a8c804, nNumberOfBytesToRead=0x5acf, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x2a8c804*, lpNumberOfBytesRead=0xafe8b4*=0x5acf, lpOverlapped=0x0) returned 1
	[0132.304] CloseHandle (hObject=0x2d0) returned 1
	[0132.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e
	[0132.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4", nBufferLength=0x4e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4", lpFilePart=0x0) returned 0x4d
	[0132.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0132.322] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\uehg_s2h\\_exqhr8c-4_ztfavmnnj.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.323] GetFileType (hFile=0x2d0) returned 0x1
	[0132.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0132.323] GetFileType (hFile=0x2d0) returned 0x1
	[0132.323] WriteFile (in: hFile=0x2d0, lpBuffer=0x2af5c00*, nNumberOfBytesToWrite=0x5ad0, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x2af5c00*, lpNumberOfBytesWritten=0xafe8a8*=0x5ad0, lpOverlapped=0x0) returned 1
	[0132.325] CloseHandle (hObject=0x2d0) returned 1
	[0132.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e
	[0132.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4", nBufferLength=0x4e, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4", lpFilePart=0x0) returned 0x4d
	[0132.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54
	[0132.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4.rogue", nBufferLength=0x54, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4.rogue", lpFilePart=0x0) returned 0x53
	[0132.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0132.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\uehg_s2h\\_exqhr8c-4_ztfavmnnj.mp4"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9c3e660, ftCreationTime.dwHighDateTime=0x1d5e3c7, ftLastAccessTime.dwLowDateTime=0x6f06930, ftLastAccessTime.dwHighDateTime=0x1d5e0bc, ftLastWriteTime.dwLowDateTime=0xb0221b62, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x5ad0)) returned 1
	[0132.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0132.327] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\uehg_s2h\\_exqhr8c-4_ztfavmnnj.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\In19VFIy2b-epIQfL-02\\uEHG_S2h\\_Exqhr8c-4_zTfaVMnNj.mp4.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\in19vfiy2b-epiqfl-02\\uehg_s2h\\_exqhr8c-4_ztfavmnnj.mp4.rogue")) returned 1
	[0132.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0132.328] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.328] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK", lpFilePart=0x0) returned 0x2a
	[0132.328] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91c0f150, ftCreationTime.dwHighDateTime=0x1d5e31f, ftLastAccessTime.dwLowDateTime=0x23f9dee0, ftLastAccessTime.dwHighDateTime=0x1d5f047, ftLastWriteTime.dwLowDateTime=0x23f9dee0, ftLastWriteTime.dwHighDateTime=0x1d5f047, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6528
	[0132.329] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91c0f150, ftCreationTime.dwHighDateTime=0x1d5e31f, ftLastAccessTime.dwLowDateTime=0x23f9dee0, ftLastAccessTime.dwHighDateTime=0x1d5f047, ftLastWriteTime.dwLowDateTime=0x23f9dee0, ftLastWriteTime.dwHighDateTime=0x1d5f047, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.329] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc231dde0, ftCreationTime.dwHighDateTime=0x1d5e96e, ftLastAccessTime.dwLowDateTime=0xdebcda50, ftLastAccessTime.dwHighDateTime=0x1d5e0c7, ftLastWriteTime.dwLowDateTime=0xdebcda50, ftLastWriteTime.dwHighDateTime=0x1d5e0c7, nFileSizeHigh=0x0, nFileSizeLow=0x161db, dwReserved0=0x0, dwReserved1=0x0, cFileName="a24L.mkv", cAlternateFileName="")) returned 1
	[0132.329] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf9d3550, ftCreationTime.dwHighDateTime=0x1d5ef52, ftLastAccessTime.dwLowDateTime=0x6adad790, ftLastAccessTime.dwHighDateTime=0x1d5e57c, ftLastWriteTime.dwLowDateTime=0x6adad790, ftLastWriteTime.dwHighDateTime=0x1d5e57c, nFileSizeHigh=0x0, nFileSizeLow=0x74eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="lBZwODsCWs.avi", cAlternateFileName="LBZWOD~1.AVI")) returned 1
	[0132.330] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97b80810, ftCreationTime.dwHighDateTime=0x1d5e2a1, ftLastAccessTime.dwLowDateTime=0x5c790230, ftLastAccessTime.dwHighDateTime=0x1d5e9be, ftLastWriteTime.dwLowDateTime=0x5c790230, ftLastWriteTime.dwHighDateTime=0x1d5e9be, nFileSizeHigh=0x0, nFileSizeLow=0x19c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="QHt-0TTVFQh550Nn.mkv", cAlternateFileName="QHT-0T~1.MKV")) returned 1
	[0132.330] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x174a9fa0, ftCreationTime.dwHighDateTime=0x1d5e911, ftLastAccessTime.dwLowDateTime=0x52dc5990, ftLastAccessTime.dwHighDateTime=0x1d5e6fb, ftLastWriteTime.dwLowDateTime=0x52dc5990, ftLastWriteTime.dwHighDateTime=0x1d5e6fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qqIEOW7diW", cAlternateFileName="QQIEOW~1")) returned 1
	[0132.330] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf96ca430, ftCreationTime.dwHighDateTime=0x1d5e18e, ftLastAccessTime.dwLowDateTime=0x2ae64030, ftLastAccessTime.dwHighDateTime=0x1d5e878, ftLastWriteTime.dwLowDateTime=0x2ae64030, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x2e7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="wNl6gV2waIlpCP.flv", cAlternateFileName="WNL6GV~1.FLV")) returned 1
	[0132.330] FindNextFileW (in: hFindFile=0xdd6528, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.331] FindClose (in: hFindFile=0xdd6528 | out: hFindFile=0xdd6528) returned 1
	[0132.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0132.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0132.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0132.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK", lpFilePart=0x0) returned 0x2a
	[0132.332] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91c0f150, ftCreationTime.dwHighDateTime=0x1d5e31f, ftLastAccessTime.dwLowDateTime=0x23f9dee0, ftLastAccessTime.dwHighDateTime=0x1d5f047, ftLastWriteTime.dwLowDateTime=0x23f9dee0, ftLastWriteTime.dwHighDateTime=0x1d5f047, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd63a8
	[0132.332] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91c0f150, ftCreationTime.dwHighDateTime=0x1d5e31f, ftLastAccessTime.dwLowDateTime=0x23f9dee0, ftLastAccessTime.dwHighDateTime=0x1d5f047, ftLastWriteTime.dwLowDateTime=0x23f9dee0, ftLastWriteTime.dwHighDateTime=0x1d5f047, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.332] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc231dde0, ftCreationTime.dwHighDateTime=0x1d5e96e, ftLastAccessTime.dwLowDateTime=0xdebcda50, ftLastAccessTime.dwHighDateTime=0x1d5e0c7, ftLastWriteTime.dwLowDateTime=0xdebcda50, ftLastWriteTime.dwHighDateTime=0x1d5e0c7, nFileSizeHigh=0x0, nFileSizeLow=0x161db, dwReserved0=0x0, dwReserved1=0x0, cFileName="a24L.mkv", cAlternateFileName="")) returned 1
	[0132.332] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf9d3550, ftCreationTime.dwHighDateTime=0x1d5ef52, ftLastAccessTime.dwLowDateTime=0x6adad790, ftLastAccessTime.dwHighDateTime=0x1d5e57c, ftLastWriteTime.dwLowDateTime=0x6adad790, ftLastWriteTime.dwHighDateTime=0x1d5e57c, nFileSizeHigh=0x0, nFileSizeLow=0x74eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="lBZwODsCWs.avi", cAlternateFileName="LBZWOD~1.AVI")) returned 1
	[0132.333] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97b80810, ftCreationTime.dwHighDateTime=0x1d5e2a1, ftLastAccessTime.dwLowDateTime=0x5c790230, ftLastAccessTime.dwHighDateTime=0x1d5e9be, ftLastWriteTime.dwLowDateTime=0x5c790230, ftLastWriteTime.dwHighDateTime=0x1d5e9be, nFileSizeHigh=0x0, nFileSizeLow=0x19c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="QHt-0TTVFQh550Nn.mkv", cAlternateFileName="QHT-0T~1.MKV")) returned 1
	[0132.333] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x174a9fa0, ftCreationTime.dwHighDateTime=0x1d5e911, ftLastAccessTime.dwLowDateTime=0x52dc5990, ftLastAccessTime.dwHighDateTime=0x1d5e6fb, ftLastWriteTime.dwLowDateTime=0x52dc5990, ftLastWriteTime.dwHighDateTime=0x1d5e6fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qqIEOW7diW", cAlternateFileName="QQIEOW~1")) returned 1
	[0132.333] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf96ca430, ftCreationTime.dwHighDateTime=0x1d5e18e, ftLastAccessTime.dwLowDateTime=0x2ae64030, ftLastAccessTime.dwHighDateTime=0x1d5e878, ftLastWriteTime.dwLowDateTime=0x2ae64030, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x2e7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="wNl6gV2waIlpCP.flv", cAlternateFileName="WNL6GV~1.FLV")) returned 1
	[0132.333] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf96ca430, ftCreationTime.dwHighDateTime=0x1d5e18e, ftLastAccessTime.dwLowDateTime=0x2ae64030, ftLastAccessTime.dwHighDateTime=0x1d5e878, ftLastWriteTime.dwLowDateTime=0x2ae64030, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x2e7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="wNl6gV2waIlpCP.flv", cAlternateFileName="WNL6GV~1.FLV")) returned 0
	[0132.334] FindClose (in: hFindFile=0xdd63a8 | out: hFindFile=0xdd63a8) returned 1
	[0132.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0132.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0132.334] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0132.334] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv", lpFilePart=0x0) returned 0x33
	[0132.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.334] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\a24l.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.334] GetFileType (hFile=0x2d0) returned 0x1
	[0132.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.335] GetFileType (hFile=0x2d0) returned 0x1
	[0132.335] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x161db
	[0132.335] ReadFile (in: hFile=0x2d0, lpBuffer=0x3adb850, nNumberOfBytesToRead=0x161db, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x3adb850*, lpNumberOfBytesRead=0xafe928*=0x161db, lpOverlapped=0x0) returned 1
	[0132.336] CloseHandle (hObject=0x2d0) returned 1
	[0132.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0132.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0132.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0132.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv", lpFilePart=0x0) returned 0x33
	[0132.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0132.422] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\a24l.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.424] GetFileType (hFile=0x2d0) returned 0x1
	[0132.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0132.425] GetFileType (hFile=0x2d0) returned 0x1
	[0132.425] WriteFile (in: hFile=0x2d0, lpBuffer=0x3b4a1e8*, nNumberOfBytesToWrite=0x161e0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x3b4a1e8*, lpNumberOfBytesWritten=0xafe91c*=0x161e0, lpOverlapped=0x0) returned 1
	[0132.427] CloseHandle (hObject=0x2d0) returned 1
	[0132.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34
	[0132.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv", nBufferLength=0x34, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv", lpFilePart=0x0) returned 0x33
	[0132.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0132.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv.rogue", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv.rogue", lpFilePart=0x0) returned 0x39
	[0132.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0132.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\a24l.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc231dde0, ftCreationTime.dwHighDateTime=0x1d5e96e, ftLastAccessTime.dwLowDateTime=0xdebcda50, ftLastAccessTime.dwHighDateTime=0x1d5e0c7, ftLastWriteTime.dwLowDateTime=0xb032ccdc, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x161e0)) returned 1
	[0132.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0132.431] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\a24l.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\a24L.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\a24l.mkv.rogue")) returned 1
	[0132.431] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0132.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi", lpFilePart=0x0) returned 0x39
	[0132.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.432] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\lbzwodscws.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.432] GetFileType (hFile=0x2d0) returned 0x1
	[0132.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.432] GetFileType (hFile=0x2d0) returned 0x1
	[0132.432] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x74eb
	[0132.432] ReadFile (in: hFile=0x2d0, lpBuffer=0x294aec8, nNumberOfBytesToRead=0x74eb, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x294aec8*, lpNumberOfBytesRead=0xafe928*=0x74eb, lpOverlapped=0x0) returned 1
	[0132.433] CloseHandle (hObject=0x2d0) returned 1
	[0132.452] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.452] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0132.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0132.452] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0132.453] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi", lpFilePart=0x0) returned 0x39
	[0132.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0132.453] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\lbzwodscws.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.454] GetFileType (hFile=0x2d0) returned 0x1
	[0132.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0132.454] GetFileType (hFile=0x2d0) returned 0x1
	[0132.454] WriteFile (in: hFile=0x2d0, lpBuffer=0x29bc6c0*, nNumberOfBytesToWrite=0x74f0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x29bc6c0*, lpNumberOfBytesWritten=0xafe91c*=0x74f0, lpOverlapped=0x0) returned 1
	[0132.458] CloseHandle (hObject=0x2d0) returned 1
	[0132.459] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a
	[0132.459] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi", nBufferLength=0x3a, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi", lpFilePart=0x0) returned 0x39
	[0132.460] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40
	[0132.460] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi.rogue", nBufferLength=0x40, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi.rogue", lpFilePart=0x0) returned 0x3f
	[0132.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0132.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\lbzwodscws.avi"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf9d3550, ftCreationTime.dwHighDateTime=0x1d5ef52, ftLastAccessTime.dwLowDateTime=0x6adad790, ftLastAccessTime.dwHighDateTime=0x1d5e57c, ftLastWriteTime.dwLowDateTime=0xb037908c, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x74f0)) returned 1
	[0132.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0132.460] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\lbzwodscws.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\lBZwODsCWs.avi.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\lbzwodscws.avi.rogue")) returned 1
	[0132.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40
	[0132.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv", nBufferLength=0x40, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv", lpFilePart=0x0) returned 0x3f
	[0132.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.461] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qht-0ttvfqh550nn.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.461] GetFileType (hFile=0x2d0) returned 0x1
	[0132.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.461] GetFileType (hFile=0x2d0) returned 0x1
	[0132.461] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x19c3
	[0132.461] ReadFile (in: hFile=0x2d0, lpBuffer=0x29c3e3c, nNumberOfBytesToRead=0x19c3, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x29c3e3c*, lpNumberOfBytesRead=0xafe928*=0x19c3, lpOverlapped=0x0) returned 1
	[0132.462] CloseHandle (hObject=0x2d0) returned 1
	[0132.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.548] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0132.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0132.548] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40
	[0132.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv", nBufferLength=0x40, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv", lpFilePart=0x0) returned 0x3f
	[0132.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0132.549] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qht-0ttvfqh550nn.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.553] GetFileType (hFile=0x2d0) returned 0x1
	[0132.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0132.553] GetFileType (hFile=0x2d0) returned 0x1
	[0132.553] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a18d38*, nNumberOfBytesToWrite=0x19d0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2a18d38*, lpNumberOfBytesWritten=0xafe91c*=0x19d0, lpOverlapped=0x0) returned 1
	[0132.554] CloseHandle (hObject=0x2d0) returned 1
	[0132.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40
	[0132.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv", nBufferLength=0x40, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv", lpFilePart=0x0) returned 0x3f
	[0132.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46
	[0132.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv.rogue", nBufferLength=0x46, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv.rogue", lpFilePart=0x0) returned 0x45
	[0132.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0132.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qht-0ttvfqh550nn.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97b80810, ftCreationTime.dwHighDateTime=0x1d5e2a1, ftLastAccessTime.dwLowDateTime=0x5c790230, ftLastAccessTime.dwHighDateTime=0x1d5e9be, ftLastWriteTime.dwLowDateTime=0xb045dfab, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x19d0)) returned 1
	[0132.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0132.556] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qht-0ttvfqh550nn.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\QHt-0TTVFQh550Nn.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qht-0ttvfqh550nn.mkv.rogue")) returned 1
	[0132.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0132.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0132.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW", lpFilePart=0x0) returned 0x35
	[0132.557] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x174a9fa0, ftCreationTime.dwHighDateTime=0x1d5e911, ftLastAccessTime.dwLowDateTime=0x52dc5990, ftLastAccessTime.dwHighDateTime=0x1d5e6fb, ftLastWriteTime.dwLowDateTime=0x52dc5990, ftLastWriteTime.dwHighDateTime=0x1d5e6fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd63a8
	[0132.558] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x174a9fa0, ftCreationTime.dwHighDateTime=0x1d5e911, ftLastAccessTime.dwLowDateTime=0x52dc5990, ftLastAccessTime.dwHighDateTime=0x1d5e6fb, ftLastWriteTime.dwLowDateTime=0x52dc5990, ftLastWriteTime.dwHighDateTime=0x1d5e6fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.558] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d37d6d0, ftCreationTime.dwHighDateTime=0x1d5e72a, ftLastAccessTime.dwLowDateTime=0x9ac7f5a0, ftLastAccessTime.dwHighDateTime=0x1d5ea40, ftLastWriteTime.dwLowDateTime=0x9ac7f5a0, ftLastWriteTime.dwHighDateTime=0x1d5ea40, nFileSizeHigh=0x0, nFileSizeLow=0x92c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="4UPeNCFQ.avi", cAlternateFileName="")) returned 1
	[0132.558] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a064b0, ftCreationTime.dwHighDateTime=0x1d5ec1a, ftLastAccessTime.dwLowDateTime=0xb9ef2530, ftLastAccessTime.dwHighDateTime=0x1d5e364, ftLastWriteTime.dwLowDateTime=0xb9ef2530, ftLastWriteTime.dwHighDateTime=0x1d5e364, nFileSizeHigh=0x0, nFileSizeLow=0x7fba, dwReserved0=0x0, dwReserved1=0x0, cFileName="T6H2k97UbI04MH.mp4", cAlternateFileName="T6H2K9~1.MP4")) returned 1
	[0132.558] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09d02d0, ftCreationTime.dwHighDateTime=0x1d5e858, ftLastAccessTime.dwLowDateTime=0x335300b0, ftLastAccessTime.dwHighDateTime=0x1d5eb01, ftLastWriteTime.dwLowDateTime=0x335300b0, ftLastWriteTime.dwHighDateTime=0x1d5eb01, nFileSizeHigh=0x0, nFileSizeLow=0xaf83, dwReserved0=0x0, dwReserved1=0x0, cFileName="V GVEU3aoGzz-SzbN.flv", cAlternateFileName="VGVEU3~1.FLV")) returned 1
	[0132.559] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773d2390, ftCreationTime.dwHighDateTime=0x1d5e7b5, ftLastAccessTime.dwLowDateTime=0x57511050, ftLastAccessTime.dwHighDateTime=0x1d5eb02, ftLastWriteTime.dwLowDateTime=0x57511050, ftLastWriteTime.dwHighDateTime=0x1d5eb02, nFileSizeHigh=0x0, nFileSizeLow=0xa572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y 1WQJWwlArgT7G tw8z.mkv", cAlternateFileName="Y1WQJW~1.MKV")) returned 1
	[0132.559] FindNextFileW (in: hFindFile=0xdd63a8, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.559] FindClose (in: hFindFile=0xdd63a8 | out: hFindFile=0xdd63a8) returned 1
	[0132.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0132.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0132.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe960) returned 1
	[0132.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36
	[0132.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW", nBufferLength=0x36, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW", lpFilePart=0x0) returned 0x35
	[0132.559] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\*", lpFindFileData=0xafe688 | out: lpFindFileData=0xafe688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x174a9fa0, ftCreationTime.dwHighDateTime=0x1d5e911, ftLastAccessTime.dwLowDateTime=0x52dc5990, ftLastAccessTime.dwHighDateTime=0x1d5e6fb, ftLastWriteTime.dwLowDateTime=0x52dc5990, ftLastWriteTime.dwHighDateTime=0x1d5e6fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6728
	[0132.560] FindNextFileW (in: hFindFile=0xdd6728, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x174a9fa0, ftCreationTime.dwHighDateTime=0x1d5e911, ftLastAccessTime.dwLowDateTime=0x52dc5990, ftLastAccessTime.dwHighDateTime=0x1d5e6fb, ftLastWriteTime.dwLowDateTime=0x52dc5990, ftLastWriteTime.dwHighDateTime=0x1d5e6fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.560] FindNextFileW (in: hFindFile=0xdd6728, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d37d6d0, ftCreationTime.dwHighDateTime=0x1d5e72a, ftLastAccessTime.dwLowDateTime=0x9ac7f5a0, ftLastAccessTime.dwHighDateTime=0x1d5ea40, ftLastWriteTime.dwLowDateTime=0x9ac7f5a0, ftLastWriteTime.dwHighDateTime=0x1d5ea40, nFileSizeHigh=0x0, nFileSizeLow=0x92c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="4UPeNCFQ.avi", cAlternateFileName="")) returned 1
	[0132.560] FindNextFileW (in: hFindFile=0xdd6728, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a064b0, ftCreationTime.dwHighDateTime=0x1d5ec1a, ftLastAccessTime.dwLowDateTime=0xb9ef2530, ftLastAccessTime.dwHighDateTime=0x1d5e364, ftLastWriteTime.dwLowDateTime=0xb9ef2530, ftLastWriteTime.dwHighDateTime=0x1d5e364, nFileSizeHigh=0x0, nFileSizeLow=0x7fba, dwReserved0=0x0, dwReserved1=0x0, cFileName="T6H2k97UbI04MH.mp4", cAlternateFileName="T6H2K9~1.MP4")) returned 1
	[0132.560] FindNextFileW (in: hFindFile=0xdd6728, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09d02d0, ftCreationTime.dwHighDateTime=0x1d5e858, ftLastAccessTime.dwLowDateTime=0x335300b0, ftLastAccessTime.dwHighDateTime=0x1d5eb01, ftLastWriteTime.dwLowDateTime=0x335300b0, ftLastWriteTime.dwHighDateTime=0x1d5eb01, nFileSizeHigh=0x0, nFileSizeLow=0xaf83, dwReserved0=0x0, dwReserved1=0x0, cFileName="V GVEU3aoGzz-SzbN.flv", cAlternateFileName="VGVEU3~1.FLV")) returned 1
	[0132.561] FindNextFileW (in: hFindFile=0xdd6728, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773d2390, ftCreationTime.dwHighDateTime=0x1d5e7b5, ftLastAccessTime.dwLowDateTime=0x57511050, ftLastAccessTime.dwHighDateTime=0x1d5eb02, ftLastWriteTime.dwLowDateTime=0x57511050, ftLastWriteTime.dwHighDateTime=0x1d5eb02, nFileSizeHigh=0x0, nFileSizeLow=0xa572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y 1WQJWwlArgT7G tw8z.mkv", cAlternateFileName="Y1WQJW~1.MKV")) returned 1
	[0132.561] FindNextFileW (in: hFindFile=0xdd6728, lpFindFileData=0xafe694 | out: lpFindFileData=0xafe694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773d2390, ftCreationTime.dwHighDateTime=0x1d5e7b5, ftLastAccessTime.dwLowDateTime=0x57511050, ftLastAccessTime.dwHighDateTime=0x1d5eb02, ftLastWriteTime.dwLowDateTime=0x57511050, ftLastWriteTime.dwHighDateTime=0x1d5eb02, nFileSizeHigh=0x0, nFileSizeLow=0xa572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y 1WQJWwlArgT7G tw8z.mkv", cAlternateFileName="Y1WQJW~1.MKV")) returned 0
	[0132.561] FindClose (in: hFindFile=0xdd6728 | out: hFindFile=0xdd6728) returned 1
	[0132.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe91c) returned 1
	[0132.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe928) returned 1
	[0132.561] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43
	[0132.561] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi", nBufferLength=0x43, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi", lpFilePart=0x0) returned 0x42
	[0132.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0132.562] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\4upencfq.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.562] GetFileType (hFile=0x2d0) returned 0x1
	[0132.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0132.562] GetFileType (hFile=0x2d0) returned 0x1
	[0132.562] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0x92c1
	[0132.562] ReadFile (in: hFile=0x2d0, lpBuffer=0x2a1c58c, nNumberOfBytesToRead=0x92c1, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x2a1c58c*, lpNumberOfBytesRead=0xafe8b4*=0x92c1, lpOverlapped=0x0) returned 1
	[0132.563] CloseHandle (hObject=0x2d0) returned 1
	[0132.595] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.595] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.595] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43
	[0132.596] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi", nBufferLength=0x43, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi", lpFilePart=0x0) returned 0x42
	[0132.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0132.596] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\4upencfq.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.597] GetFileType (hFile=0x2d0) returned 0x1
	[0132.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0132.597] GetFileType (hFile=0x2d0) returned 0x1
	[0132.597] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a97188*, nNumberOfBytesToWrite=0x92d0, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x2a97188*, lpNumberOfBytesWritten=0xafe8a8*=0x92d0, lpOverlapped=0x0) returned 1
	[0132.599] CloseHandle (hObject=0x2d0) returned 1
	[0132.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43
	[0132.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi", nBufferLength=0x43, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi", lpFilePart=0x0) returned 0x42
	[0132.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49
	[0132.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi.rogue", nBufferLength=0x49, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi.rogue", lpFilePart=0x0) returned 0x48
	[0132.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0132.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\4upencfq.avi"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d37d6d0, ftCreationTime.dwHighDateTime=0x1d5e72a, ftLastAccessTime.dwLowDateTime=0x9ac7f5a0, ftLastAccessTime.dwHighDateTime=0x1d5ea40, ftLastWriteTime.dwLowDateTime=0xb04d0582, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x92d0)) returned 1
	[0132.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0132.606] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\4upencfq.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\4UPeNCFQ.avi.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\4upencfq.avi.rogue")) returned 1
	[0132.607] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49
	[0132.607] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4", nBufferLength=0x49, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4", lpFilePart=0x0) returned 0x48
	[0132.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0132.607] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\t6h2k97ubi04mh.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.607] GetFileType (hFile=0x2d0) returned 0x1
	[0132.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0132.607] GetFileType (hFile=0x2d0) returned 0x1
	[0132.607] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0x7fba
	[0132.607] ReadFile (in: hFile=0x2d0, lpBuffer=0x2aa06f0, nNumberOfBytesToRead=0x7fba, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x2aa06f0*, lpNumberOfBytesRead=0xafe8b4*=0x7fba, lpOverlapped=0x0) returned 1
	[0132.608] CloseHandle (hObject=0x2d0) returned 1
	[0132.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49
	[0132.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4", nBufferLength=0x49, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4", lpFilePart=0x0) returned 0x48
	[0132.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0132.640] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\t6h2k97ubi04mh.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.642] GetFileType (hFile=0x2d0) returned 0x1
	[0132.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0132.642] GetFileType (hFile=0x2d0) returned 0x1
	[0132.642] WriteFile (in: hFile=0x2d0, lpBuffer=0x2b1539c*, nNumberOfBytesToWrite=0x7fc0, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x2b1539c*, lpNumberOfBytesWritten=0xafe8a8*=0x7fc0, lpOverlapped=0x0) returned 1
	[0132.643] CloseHandle (hObject=0x2d0) returned 1
	[0132.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49
	[0132.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4", nBufferLength=0x49, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4", lpFilePart=0x0) returned 0x48
	[0132.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f
	[0132.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4.rogue", nBufferLength=0x4f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4.rogue", lpFilePart=0x0) returned 0x4e
	[0132.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0132.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\t6h2k97ubi04mh.mp4"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a064b0, ftCreationTime.dwHighDateTime=0x1d5ec1a, ftLastAccessTime.dwLowDateTime=0xb9ef2530, ftLastAccessTime.dwHighDateTime=0x1d5e364, ftLastWriteTime.dwLowDateTime=0xb0542ca4, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x7fc0)) returned 1
	[0132.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0132.647] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\t6h2k97ubi04mh.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\T6H2k97UbI04MH.mp4.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\t6h2k97ubi04mh.mp4.rogue")) returned 1
	[0132.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f
	[0132.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv", nBufferLength=0x4f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv", lpFilePart=0x0) returned 0x4e
	[0132.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe80c) returned 1
	[0132.648] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\y 1wqjwwlargt7g tw8z.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.648] GetFileType (hFile=0x2d0) returned 0x1
	[0132.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe808) returned 1
	[0132.648] GetFileType (hFile=0x2d0) returned 0x1
	[0132.648] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe908 | out: lpFileSizeHigh=0xafe908*=0x0) returned 0xa572
	[0132.652] ReadFile (in: hFile=0x2d0, lpBuffer=0x291d0f8, nNumberOfBytesToRead=0xa572, lpNumberOfBytesRead=0xafe8b4, lpOverlapped=0x0 | out: lpBuffer=0x291d0f8*, lpNumberOfBytesRead=0xafe8b4*=0xa572, lpOverlapped=0x0) returned 1
	[0132.653] CloseHandle (hObject=0x2d0) returned 1
	[0132.746] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.746] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe8fc | out: lpFileInformation=0xafe8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.746] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f
	[0132.746] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv", nBufferLength=0x4f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv", lpFilePart=0x0) returned 0x4e
	[0132.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe7f8) returned 1
	[0132.746] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\y 1wqjwwlargt7g tw8z.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.748] GetFileType (hFile=0x2d0) returned 0x1
	[0132.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe7f4) returned 1
	[0132.748] GetFileType (hFile=0x2d0) returned 0x1
	[0132.748] WriteFile (in: hFile=0x2d0, lpBuffer=0x299dbc0*, nNumberOfBytesToWrite=0xa580, lpNumberOfBytesWritten=0xafe8a8, lpOverlapped=0x0 | out: lpBuffer=0x299dbc0*, lpNumberOfBytesWritten=0xafe8a8*=0xa580, lpOverlapped=0x0) returned 1
	[0132.749] CloseHandle (hObject=0x2d0) returned 1
	[0132.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f
	[0132.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv", nBufferLength=0x4f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv", lpFilePart=0x0) returned 0x4e
	[0132.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55
	[0132.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv.rogue", nBufferLength=0x55, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv.rogue", lpFilePart=0x0) returned 0x54
	[0132.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe88c) returned 1
	[0132.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\y 1wqjwwlargt7g tw8z.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe908 | out: lpFileInformation=0xafe908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773d2390, ftCreationTime.dwHighDateTime=0x1d5e7b5, ftLastAccessTime.dwLowDateTime=0x57511050, ftLastAccessTime.dwHighDateTime=0x1d5eb02, ftLastWriteTime.dwLowDateTime=0xb0627ac7, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0xa580)) returned 1
	[0132.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe888) returned 1
	[0132.753] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\y 1wqjwwlargt7g tw8z.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\vhK8-kbqSOIYLuXImoK\\qqIEOW7diW\\Y 1WQJWwlArgT7G tw8z.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\vhk8-kbqsoiyluximok\\qqieow7diw\\y 1wqjwwlargt7g tw8z.mkv.rogue")) returned 1
	[0132.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0132.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p", lpFilePart=0x0) returned 0x2a
	[0132.754] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa999ca50, ftCreationTime.dwHighDateTime=0x1d5e800, ftLastAccessTime.dwLowDateTime=0x1519fa00, ftLastAccessTime.dwHighDateTime=0x1d5e70e, ftLastWriteTime.dwLowDateTime=0x1519fa00, ftLastWriteTime.dwHighDateTime=0x1d5e70e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd6028
	[0132.755] FindNextFileW (in: hFindFile=0xdd6028, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa999ca50, ftCreationTime.dwHighDateTime=0x1d5e800, ftLastAccessTime.dwLowDateTime=0x1519fa00, ftLastAccessTime.dwHighDateTime=0x1d5e70e, ftLastWriteTime.dwLowDateTime=0x1519fa00, ftLastWriteTime.dwHighDateTime=0x1d5e70e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.755] FindNextFileW (in: hFindFile=0xdd6028, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ce3b00, ftCreationTime.dwHighDateTime=0x1d5e8a1, ftLastAccessTime.dwLowDateTime=0xea423470, ftLastAccessTime.dwHighDateTime=0x1d5ec6f, ftLastWriteTime.dwLowDateTime=0xea423470, ftLastWriteTime.dwHighDateTime=0x1d5ec6f, nFileSizeHigh=0x0, nFileSizeLow=0x106ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jj48i.swf", cAlternateFileName="")) returned 1
	[0132.755] FindNextFileW (in: hFindFile=0xdd6028, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d08120, ftCreationTime.dwHighDateTime=0x1d5e66d, ftLastAccessTime.dwLowDateTime=0xfe26c900, ftLastAccessTime.dwHighDateTime=0x1d5e2cf, ftLastWriteTime.dwLowDateTime=0xfe26c900, ftLastWriteTime.dwHighDateTime=0x1d5e2cf, nFileSizeHigh=0x0, nFileSizeLow=0x6dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="KgjnKpmO4uGulCZ.mkv", cAlternateFileName="KGJNKP~1.MKV")) returned 1
	[0132.755] FindNextFileW (in: hFindFile=0xdd6028, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd143ab00, ftCreationTime.dwHighDateTime=0x1d5eb0e, ftLastAccessTime.dwLowDateTime=0x72a11c30, ftLastAccessTime.dwHighDateTime=0x1d5eba5, ftLastWriteTime.dwLowDateTime=0x72a11c30, ftLastWriteTime.dwHighDateTime=0x1d5eba5, nFileSizeHigh=0x0, nFileSizeLow=0x17c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZxcUqrAh1wJRe24ZCt.swf", cAlternateFileName="ZXCUQR~1.SWF")) returned 1
	[0132.755] FindNextFileW (in: hFindFile=0xdd6028, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.756] FindClose (in: hFindFile=0xdd6028 | out: hFindFile=0xdd6028) returned 1
	[0132.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0132.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0132.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9d4) returned 1
	[0132.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p", lpFilePart=0x0) returned 0x2a
	[0132.756] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\*", lpFindFileData=0xafe6fc | out: lpFindFileData=0xafe6fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa999ca50, ftCreationTime.dwHighDateTime=0x1d5e800, ftLastAccessTime.dwLowDateTime=0x1519fa00, ftLastAccessTime.dwHighDateTime=0x1d5e70e, ftLastWriteTime.dwLowDateTime=0x1519fa00, ftLastWriteTime.dwHighDateTime=0x1d5e70e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd64e8
	[0132.756] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa999ca50, ftCreationTime.dwHighDateTime=0x1d5e800, ftLastAccessTime.dwLowDateTime=0x1519fa00, ftLastAccessTime.dwHighDateTime=0x1d5e70e, ftLastWriteTime.dwLowDateTime=0x1519fa00, ftLastWriteTime.dwHighDateTime=0x1d5e70e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.756] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ce3b00, ftCreationTime.dwHighDateTime=0x1d5e8a1, ftLastAccessTime.dwLowDateTime=0xea423470, ftLastAccessTime.dwHighDateTime=0x1d5ec6f, ftLastWriteTime.dwLowDateTime=0xea423470, ftLastWriteTime.dwHighDateTime=0x1d5ec6f, nFileSizeHigh=0x0, nFileSizeLow=0x106ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jj48i.swf", cAlternateFileName="")) returned 1
	[0132.757] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d08120, ftCreationTime.dwHighDateTime=0x1d5e66d, ftLastAccessTime.dwLowDateTime=0xfe26c900, ftLastAccessTime.dwHighDateTime=0x1d5e2cf, ftLastWriteTime.dwLowDateTime=0xfe26c900, ftLastWriteTime.dwHighDateTime=0x1d5e2cf, nFileSizeHigh=0x0, nFileSizeLow=0x6dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="KgjnKpmO4uGulCZ.mkv", cAlternateFileName="KGJNKP~1.MKV")) returned 1
	[0132.757] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd143ab00, ftCreationTime.dwHighDateTime=0x1d5eb0e, ftLastAccessTime.dwLowDateTime=0x72a11c30, ftLastAccessTime.dwHighDateTime=0x1d5eba5, ftLastWriteTime.dwLowDateTime=0x72a11c30, ftLastWriteTime.dwHighDateTime=0x1d5eba5, nFileSizeHigh=0x0, nFileSizeLow=0x17c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZxcUqrAh1wJRe24ZCt.swf", cAlternateFileName="ZXCUQR~1.SWF")) returned 1
	[0132.757] FindNextFileW (in: hFindFile=0xdd64e8, lpFindFileData=0xafe708 | out: lpFindFileData=0xafe708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd143ab00, ftCreationTime.dwHighDateTime=0x1d5eb0e, ftLastAccessTime.dwLowDateTime=0x72a11c30, ftLastAccessTime.dwHighDateTime=0x1d5eba5, ftLastWriteTime.dwLowDateTime=0x72a11c30, ftLastWriteTime.dwHighDateTime=0x1d5eba5, nFileSizeHigh=0x0, nFileSizeLow=0x17c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZxcUqrAh1wJRe24ZCt.swf", cAlternateFileName="ZXCUQR~1.SWF")) returned 0
	[0132.757] FindClose (in: hFindFile=0xdd64e8 | out: hFindFile=0xdd64e8) returned 1
	[0132.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe990) returned 1
	[0132.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe99c) returned 1
	[0132.757] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0132.757] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv", lpFilePart=0x0) returned 0x3e
	[0132.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe880) returned 1
	[0132.758] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ws3v7i0a_y5kqevnv4p\\kgjnkpmo4ugulcz.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.758] GetFileType (hFile=0x2d0) returned 0x1
	[0132.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe87c) returned 1
	[0132.758] GetFileType (hFile=0x2d0) returned 0x1
	[0132.758] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0xafe97c | out: lpFileSizeHigh=0xafe97c*=0x0) returned 0x6dd3
	[0132.758] ReadFile (in: hFile=0x2d0, lpBuffer=0x29a997c, nNumberOfBytesToRead=0x6dd3, lpNumberOfBytesRead=0xafe928, lpOverlapped=0x0 | out: lpBuffer=0x29a997c*, lpNumberOfBytesRead=0xafe928*=0x6dd3, lpOverlapped=0x0) returned 1
	[0132.758] CloseHandle (hObject=0x2d0) returned 1
	[0132.826] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b
	[0132.827] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x2b, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a
	[0132.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe8f4) returned 1
	[0132.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0xafe970 | out: lpFileInformation=0xafe970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8f0) returned 1
	[0132.827] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0132.827] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv", lpFilePart=0x0) returned 0x3e
	[0132.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe86c) returned 1
	[0132.827] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ws3v7i0a_y5kqevnv4p\\kgjnkpmo4ugulcz.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0
	[0132.828] GetFileType (hFile=0x2d0) returned 0x1
	[0132.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe868) returned 1
	[0132.829] GetFileType (hFile=0x2d0) returned 0x1
	[0132.829] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a18cc8*, nNumberOfBytesToWrite=0x6de0, lpNumberOfBytesWritten=0xafe91c, lpOverlapped=0x0 | out: lpBuffer=0x2a18cc8*, lpNumberOfBytesWritten=0xafe91c*=0x6de0, lpOverlapped=0x0) returned 1
	[0132.830] CloseHandle (hObject=0x2d0) returned 1
	[0132.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f
	[0132.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv", nBufferLength=0x3f, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv", lpFilePart=0x0) returned 0x3e
	[0132.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv.rogue", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45
	[0132.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv.rogue", nBufferLength=0x45, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv.rogue", lpFilePart=0x0) returned 0x44
	[0132.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe900) returned 1
	[0132.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ws3v7i0a_y5kqevnv4p\\kgjnkpmo4ugulcz.mkv"), fInfoLevelId=0x0, lpFileInformation=0xafe97c | out: lpFileInformation=0xafe97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d08120, ftCreationTime.dwHighDateTime=0x1d5e66d, ftLastAccessTime.dwLowDateTime=0xfe26c900, ftLastAccessTime.dwHighDateTime=0x1d5e2cf, ftLastWriteTime.dwLowDateTime=0xb070c924, ftLastWriteTime.dwHighDateTime=0x1d60875, nFileSizeHigh=0x0, nFileSizeLow=0x6de0)) returned 1
	[0132.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe8fc) returned 1
	[0132.833] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ws3v7i0a_y5kqevnv4p\\kgjnkpmo4ugulcz.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\Ws3V7I0a_y5KqeVNV4p\\KgjnKpmO4uGulCZ.mkv.rogue" (normalized: "c:\\users\\fd1hvy\\videos\\ws3v7i0a_y5kqevnv4p\\kgjnkpmo4ugulcz.mkv.rogue")) returned 1
	[0132.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24
	[0132.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt", nBufferLength=0x24, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt", lpFilePart=0x0) returned 0x23
	[0132.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafe9e8) returned 1
	[0132.848] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2d0
	[0132.854] GetFileType (hFile=0x2d0) returned 0x1
	[0132.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafe9e4) returned 1
	[0132.854] GetFileType (hFile=0x2d0) returned 0x1
	[0132.855] WriteFile (in: hFile=0x2d0, lpBuffer=0x2a21d6c*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xafea48, lpOverlapped=0x0 | out: lpBuffer=0x2a21d6c*, lpNumberOfBytesWritten=0xafea48*=0x104, lpOverlapped=0x0) returned 1
	[0132.856] CloseHandle (hObject=0x2d0) returned 1
	[0132.954] GetCurrentProcess () returned 0xffffffff
	[0132.954] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe73c | out: TokenHandle=0xafe73c*=0x2d4) returned 1
	[0132.971] GetCurrentProcess () returned 0xffffffff
	[0132.972] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe74c | out: TokenHandle=0xafe74c*=0x2f0) returned 1
	[0132.982] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2d8
	[0132.982] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x2dc
	[0132.992] GetCurrentProcess () returned 0xffffffff
	[0132.992] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe75c | out: TokenHandle=0xafe75c*=0x2e0) returned 1
	[0132.995] GetCurrentProcess () returned 0xffffffff
	[0132.995] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe76c | out: TokenHandle=0xafe76c*=0x2e4) returned 1
	[0133.001] QueryPerformanceFrequency (in: lpFrequency=0xc65ab0 | out: lpFrequency=0xc65ab0*=100000000) returned 1
	[0133.001] QueryPerformanceCounter (in: lpPerformanceCount=0xafeae0 | out: lpPerformanceCount=0xafeae0*=22738629458) returned 1
	[0133.006] GetCurrentProcess () returned 0xffffffff
	[0133.006] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe728 | out: TokenHandle=0xafe728*=0x404) returned 1
	[0133.009] GetCurrentProcess () returned 0xffffffff
	[0133.009] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe738 | out: TokenHandle=0xafe738*=0x414) returned 1
	[0133.024] GetCurrentProcess () returned 0xffffffff
	[0133.024] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe73c | out: TokenHandle=0xafe73c*=0x418) returned 1
	[0133.027] GetCurrentProcess () returned 0xffffffff
	[0133.027] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe74c | out: TokenHandle=0xafe74c*=0x41c) returned 1
	[0133.031] GetCurrentProcess () returned 0xffffffff
	[0133.031] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe9c4 | out: TokenHandle=0xafe9c4*=0x420) returned 1
	[0133.043] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0xafdafc | out: phkResult=0xafdafc*=0x424) returned 0x0
	[0133.044] RegQueryValueExW (in: hKey=0x424, lpValueName="InstallationType", lpReserved=0x0, lpType=0xafdb1c, lpData=0x0, lpcbData=0xafdb18*=0x0 | out: lpType=0xafdb1c*=0x1, lpData=0x0, lpcbData=0xafdb18*=0xe) returned 0x0
	[0133.044] RegQueryValueExW (in: hKey=0x424, lpValueName="InstallationType", lpReserved=0x0, lpType=0xafdb1c, lpData=0x2a2cf88, lpcbData=0xafdb18*=0xe | out: lpType=0xafdb1c*=0x1, lpData="Client", lpcbData=0xafdb18*=0xe) returned 0x0
	[0133.045] RegCloseKey (hKey=0x424) returned 0x0
	[0133.763] CoTaskMemAlloc (cb=0xcc0) returned 0xdd8548
	[0133.764] RasEnumConnectionsW (in: param_1=0xdd8548, param_2=0xafe9d4, param_3=0xafe9d8 | out: param_1=0xdd8548, param_2=0xafe9d4, param_3=0xafe9d8) returned 0x0
	[0134.077] CoTaskMemFree (pv=0xdd8548) 
	[0134.516] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xafe7c0 | out: lpWSAData=0xafe7c0) returned 0
	[0134.521] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x488
	[0134.966] setsockopt (s=0x488, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0134.966] closesocket (s=0x488) returned 0
	[0134.967] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x488
	[0134.973] setsockopt (s=0x488, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0134.974] closesocket (s=0x488) returned 0
	[0134.974] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x488
	[0134.975] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x48c
	[0134.975] ioctlsocket (in: s=0x488, cmd=-2147195266, argp=0xafe9dc | out: argp=0xafe9dc) returned 0
	[0134.976] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x490
	[0134.976] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x494
	[0134.976] ioctlsocket (in: s=0x490, cmd=-2147195266, argp=0xafe9dc | out: argp=0xafe9dc) returned 0
	[0134.977] WSAIoctl (in: s=0x488, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0xafe9c4, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0xafe9c4, lpOverlapped=0x0) returned -1
	[0134.979] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0xafe6f4, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0134.984] WSAEventSelect (s=0x488, hEventObject=0x48c, lNetworkEvents=512) returned 0
	[0134.989] WSAIoctl (in: s=0x490, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0xafe9c4, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0xafe9c4, lpOverlapped=0x0) returned -1
	[0134.989] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0xafe6f4, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0134.989] WSAEventSelect (s=0x490, hEventObject=0x494, lNetworkEvents=512) returned 0
	[0134.989] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x49c
	[0134.990] RasConnectionNotificationW (param_1=0xffffffff, param_2=0x49c, param_3=0x3) returned 0x0
	[0135.050] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0xafe9f0 | out: phkResult=0xafe9f0*=0x4b4) returned 0x0
	[0135.052] RegOpenKeyExW (in: hKey=0x4b4, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe9a4 | out: phkResult=0xafe9a4*=0x4b8) returned 0x0
	[0135.054] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4bc
	[0135.054] RegNotifyChangeKeyValue (hKey=0x4b8, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x4bc, fAsynchronous=1) returned 0x0
	[0135.055] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe9a8 | out: phkResult=0xafe9a8*=0x4c0) returned 0x0
	[0135.057] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4c4
	[0135.057] RegNotifyChangeKeyValue (hKey=0x4c0, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x4c4, fAsynchronous=1) returned 0x0
	[0135.057] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe9a8 | out: phkResult=0xafe9a8*=0x4c8) returned 0x0
	[0135.058] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4cc
	[0135.059] RegNotifyChangeKeyValue (hKey=0x4c8, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x4cc, fAsynchronous=1) returned 0x0
	[0135.059] GetCurrentProcess () returned 0xffffffff
	[0135.059] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe994 | out: TokenHandle=0xafe994*=0x4d0) returned 1
	[0135.068] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe2a0 | out: phkResult=0xafe2a0*=0x4d4) returned 0x0
	[0135.069] RegQueryValueExW (in: hKey=0x4d4, lpValueName="LegacyWPADSupport", lpReserved=0x0, lpType=0xafe2bc, lpData=0x0, lpcbData=0xafe2b8*=0x0 | out: lpType=0xafe2bc*=0x0, lpData=0x0, lpcbData=0xafe2b8*=0x0) returned 0x2
	[0135.069] RegCloseKey (hKey=0x4d4) returned 0x0
	[0135.749] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0xde0870
	[0136.446] WinHttpSetTimeouts (hInternet=0xde0870, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1
	[0136.446] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0xafe9a4 | out: pProxyConfig=0xafe9a4) returned 1
	[0137.875] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0xafe218, nSize=0x80 | out: lpBuffer="ﾉ琉￿￿¯ဢ玳㦀牴皴犭佚玼匽ꏣØ皴犭㦀牴胰犘㦀牴胰犘¯啾玼￿￿¯꛰琉￿￿佚玼刐玼䪌犷") returned 0x0
	[0137.875] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0xafe218, nSize=0x80 | out: lpBuffer="ﾉ琉￿￿¯ဢ玳㦀牴皴犭佚玼匽ꏣØ皴犭㦀牴胰犘㦀牴胰犘¯啾玼￿￿¯꛰琉￿￿佚玼刐玼䪌犷") returned 0x0
	[0137.881] EtwEventRegister (in: ProviderId=0x2a2fc30, EnableCallback=0x4e006ae, CallbackContext=0x0, RegHandle=0x2a2fc0c | out: RegHandle=0x2a2fc0c) returned 0x0
	[0137.881] EtwEventSetInformation (RegHandle=0xdc0b40, InformationClass=0x65, EventInformation=0x2, InformationLength=0x2a2fbcc) returned 0x0
	[0137.884] GetCurrentProcess () returned 0xffffffff
	[0137.884] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe704 | out: TokenHandle=0xafe704*=0x518) returned 1
	[0137.887] GetCurrentProcess () returned 0xffffffff
	[0137.887] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe714 | out: TokenHandle=0xafe714*=0x51c) returned 1
	[0137.892] SetEvent (hEvent=0x2d8) returned 1
	[0137.928] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe90c*=0x49c, lpdwindex=0xafe72c | out: lpdwindex=0xafe72c) returned 0x80010115
	[0138.195] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe8ec*=0x48c, lpdwindex=0xafe70c | out: lpdwindex=0xafe70c) returned 0x80010115
	[0138.195] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe8ec*=0x494, lpdwindex=0xafe70c | out: lpdwindex=0xafe70c) returned 0x80010115
	[0138.196] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe940*=0x4bc, lpdwindex=0xafe75c | out: lpdwindex=0xafe75c) returned 0x80010115
	[0138.215] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe940*=0x4c4, lpdwindex=0xafe75c | out: lpdwindex=0xafe75c) returned 0x80010115
	[0138.215] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe940*=0x4cc, lpdwindex=0xafe75c | out: lpdwindex=0xafe75c) returned 0x80010115
	[0138.221] GetCurrentProcess () returned 0xffffffff
	[0138.221] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe67c | out: TokenHandle=0xafe67c*=0x558) returned 1
	[0138.222] GetCurrentProcess () returned 0xffffffff
	[0138.222] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe68c | out: TokenHandle=0xafe68c*=0x55c) returned 1
	[0138.224] GetTimeZoneInformation (in: lpTimeZoneInformation=0xafe7fc | out: lpTimeZoneInformation=0xafe7fc) returned 0x2
	[0138.254] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0xafe658 | out: pTimeZoneInformation=0xafe658) returned 0x2
	[0138.256] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe73c | out: phkResult=0xafe73c*=0x564) returned 0x0
	[0138.257] RegQueryValueExW (in: hKey=0x564, lpValueName="TZI", lpReserved=0x0, lpType=0xafe758, lpData=0x0, lpcbData=0xafe754*=0x0 | out: lpType=0xafe758*=0x3, lpData=0x0, lpcbData=0xafe754*=0x2c) returned 0x0
	[0138.257] RegQueryValueExW (in: hKey=0x564, lpValueName="TZI", lpReserved=0x0, lpType=0xafe758, lpData=0x2a32b70, lpcbData=0xafe754*=0x2c | out: lpType=0xafe758*=0x3, lpData=0x2a32b70*, lpcbData=0xafe754*=0x2c) returned 0x0
	[0138.258] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe590 | out: phkResult=0xafe590*=0x0) returned 0x2
	[0138.260] RegQueryValueExW (in: hKey=0x564, lpValueName="MUI_Display", lpReserved=0x0, lpType=0xafe730, lpData=0x0, lpcbData=0xafe72c*=0x0 | out: lpType=0xafe730*=0x1, lpData=0x0, lpcbData=0xafe72c*=0x20) returned 0x0
	[0138.260] RegQueryValueExW (in: hKey=0x564, lpValueName="MUI_Display", lpReserved=0x0, lpType=0xafe730, lpData=0x2a32f94, lpcbData=0xafe72c*=0x20 | out: lpType=0xafe730*=0x1, lpData="@tzres.dll,-320", lpcbData=0xafe72c*=0x20) returned 0x0
	[0138.260] RegQueryValueExW (in: hKey=0x564, lpValueName="MUI_Std", lpReserved=0x0, lpType=0xafe730, lpData=0x0, lpcbData=0xafe72c*=0x0 | out: lpType=0xafe730*=0x1, lpData=0x0, lpcbData=0xafe72c*=0x20) returned 0x0
	[0138.260] RegQueryValueExW (in: hKey=0x564, lpValueName="MUI_Std", lpReserved=0x0, lpType=0xafe730, lpData=0x2a32fec, lpcbData=0xafe72c*=0x20 | out: lpType=0xafe730*=0x1, lpData="@tzres.dll,-322", lpcbData=0xafe72c*=0x20) returned 0x0
	[0138.260] RegQueryValueExW (in: hKey=0x564, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0xafe730, lpData=0x0, lpcbData=0xafe72c*=0x0 | out: lpType=0xafe730*=0x1, lpData=0x0, lpcbData=0xafe72c*=0x20) returned 0x0
	[0138.260] RegQueryValueExW (in: hKey=0x564, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0xafe730, lpData=0x2a33044, lpcbData=0xafe72c*=0x20 | out: lpType=0xafe730*=0x1, lpData="@tzres.dll,-321", lpcbData=0xafe72c*=0x20) returned 0x0
	[0138.285] CoTaskMemAlloc (cb=0x20c) returned 0xdeed50
	[0138.285] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0xdeed50 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0
	[0138.287] CoTaskMemFree (pv=0xdeed50) 
	[0138.288] CoTaskMemAlloc (cb=0x20c) returned 0xdeed50
	[0138.288] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0xafe74c, pwszFileMUIPath=0xdeed50, pcchFileMUIPath=0xafe750, pululEnumerator=0xafe744 | out: pwszLanguage=0x0, pcchLanguage=0xafe74c, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0xafe750, pululEnumerator=0xafe744) returned 1
	[0138.594] CoTaskMemFree (pv=0x0) 
	[0138.594] CoTaskMemFree (pv=0xdeed50) 
	[0138.595] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x8370001
	[0138.599] CoTaskMemAlloc (cb=0x3ec) returned 0xdeed50
	[0138.599] LoadStringW (in: hInstance=0x8370001, uID=0x140, lpBuffer=0xdeed50, cchBufferMax=500 | out: lpBuffer="(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna") returned 0x3c
	[0138.599] CoTaskMemFree (pv=0xdeed50) 
	[0138.599] FreeLibrary (hLibModule=0x8370001) returned 1
	[0138.600] CoTaskMemAlloc (cb=0x20c) returned 0xdeed50
	[0138.600] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0xdeed50 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0
	[0138.600] CoTaskMemFree (pv=0xdeed50) 
	[0138.600] CoTaskMemAlloc (cb=0x20c) returned 0xdeed50
	[0138.600] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0xafe74c, pwszFileMUIPath=0xdeed50, pcchFileMUIPath=0xafe750, pululEnumerator=0xafe744 | out: pwszLanguage=0x0, pcchLanguage=0xafe74c, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0xafe750, pululEnumerator=0xafe744) returned 1
	[0138.601] CoTaskMemFree (pv=0x0) 
	[0138.601] CoTaskMemFree (pv=0xdeed50) 
	[0138.601] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x8370001
	[0138.602] CoTaskMemAlloc (cb=0x3ec) returned 0xdeed50
	[0138.602] LoadStringW (in: hInstance=0x8370001, uID=0x142, lpBuffer=0xdeed50, cchBufferMax=500 | out: lpBuffer="W. Europe Standard Time") returned 0x17
	[0138.602] CoTaskMemFree (pv=0xdeed50) 
	[0138.602] FreeLibrary (hLibModule=0x8370001) returned 1
	[0138.603] CoTaskMemAlloc (cb=0x20c) returned 0xdeed50
	[0138.603] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0xdeed50 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0
	[0138.603] CoTaskMemFree (pv=0xdeed50) 
	[0138.603] CoTaskMemAlloc (cb=0x20c) returned 0xdeed50
	[0138.603] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0xafe74c, pwszFileMUIPath=0xdeed50, pcchFileMUIPath=0xafe750, pululEnumerator=0xafe744 | out: pwszLanguage=0x0, pcchLanguage=0xafe74c, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0xafe750, pululEnumerator=0xafe744) returned 1
	[0138.604] CoTaskMemFree (pv=0x0) 
	[0138.604] CoTaskMemFree (pv=0xdeed50) 
	[0138.604] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x8370001
	[0138.605] CoTaskMemAlloc (cb=0x3ec) returned 0xdeed50
	[0138.605] LoadStringW (in: hInstance=0x8370001, uID=0x141, lpBuffer=0xdeed50, cchBufferMax=500 | out: lpBuffer="W. Europe Daylight Time") returned 0x17
	[0138.605] CoTaskMemFree (pv=0xdeed50) 
	[0138.605] FreeLibrary (hLibModule=0x8370001) returned 1
	[0138.606] RegCloseKey (hKey=0x564) returned 0x0
	[0138.607] SetEvent (hEvent=0x2d8) returned 1
	[0138.643] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0xafe958 | out: pFixedInfo=0x0, pOutBufLen=0xafe958) returned 0x6f
	[0140.957] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0xdeed50
	[0140.957] GetNetworkParams (in: pFixedInfo=0xdeed50, pOutBufLen=0xafe958 | out: pFixedInfo=0xdeed50, pOutBufLen=0xafe958) returned 0x0
	[0141.138] LocalFree (hMem=0xdeed50) returned 0x0
	[0141.140] CoTaskMemAlloc (cb=0x20c) returned 0xdf8940
	[0141.140] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_Disabled", lpBuffer=0xdf8940, nSize=0x104 | out: lpBuffer="쫐ß嶘Ô") returned 0x0
	[0141.140] CoTaskMemFree (pv=0xdf8940) 
	[0141.140] CoTaskMemAlloc (cb=0x20c) returned 0xdf8940
	[0141.140] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_MinCount", lpBuffer=0xdf8940, nSize=0x104 | out: lpBuffer="쫐ß嶘Ô") returned 0x0
	[0141.140] CoTaskMemFree (pv=0xdf8940) 
	[0141.145] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x5a4
	[0141.149] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x57c
	[0141.150] GetAddrInfoW (in: pNodeName="www.google.com", pServiceName=0x0, pHints=0xafe840*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0xafe7e8 | out: ppResult=0xafe7e8*=0xdc8d88*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="www.google.com", ai_addr=0xde5218*(sa_family=2, sin_port=0x0, sin_addr="172.217.22.100"), ai_next=0x0)) returned 0
	[0141.780] FreeAddrInfoW (pAddrInfo=0xdc8d88*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="www.google.com", ai_addr=0xde5218*(sa_family=2, sin_port=0x0, sin_addr="172.217.22.100"), ai_next=0x0)) 
	[0141.785] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x5ac
	[0141.785] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5b4
	[0141.785] ioctlsocket (in: s=0x5ac, cmd=-2147195266, argp=0xafe814 | out: argp=0xafe814) returned 0
	[0141.786] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x5b8
	[0141.786] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5bc
	[0141.786] ioctlsocket (in: s=0x5b8, cmd=-2147195266, argp=0xafe814 | out: argp=0xafe814) returned 0
	[0141.786] WSAIoctl (in: s=0x5ac, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0xafe7fc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0xafe7fc, lpOverlapped=0x0) returned -1
	[0141.786] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0xafe52c, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0141.786] WSAEventSelect (s=0x5ac, hEventObject=0x5b4, lNetworkEvents=512) returned 0
	[0141.786] WSAIoctl (in: s=0x5b8, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0xafe7fc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0xafe7fc, lpOverlapped=0x0) returned -1
	[0141.786] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0xafe52c, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0141.786] WSAEventSelect (s=0x5b8, hEventObject=0x5bc, lNetworkEvents=512) returned 0
	[0141.787] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0xafe7f8*=0x0 | out: AdapterAddresses=0x0, SizePointer=0xafe7f8*=0x818) returned 0x6f
	[0141.835] LocalAlloc (uFlags=0x0, uBytes=0x818) returned 0xdf9b98
	[0141.835] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0xdf9b98, SizePointer=0xafe7f8*=0x818 | out: AdapterAddresses=0xdf9b98*(Alignment=0x300000178, Length=0x178, IfIndex=0x3, Next=0xdf9e48, AdapterName="{9E48833B-70C6-43EE-85DC-893C1782D802}", FirstUnicastAddress=0xdf9dbc, FirstAnycastAddress=0x0, FirstMulticastAddress=0x0, FirstDnsServerAddress=0x0, DnsSuffix="", Description="Intel(R) 82574L Gigabit Network Connection #2", FriendlyName="Ethernet 2", PhysicalAddress=([0]=0x0, [1]=0x7, [2]=0xff, [3]=0x1, [4]=0xa6, [5]=0x57, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x1c5, DdnsEnabled=0x1c5, RegisterAdapterSuffix=0x1c5, Dhcpv4Enabled=0x1c5, ReceiveOnly=0x1c5, NoMulticast=0x1c5, Ipv6OtherStatefulConfig=0x1c5, NetbiosOverTcpipEnabled=0x1c5, Ipv4Enabled=0x1c5, Ipv6Enabled=0x1c5, Ipv6ManagedAddressConfigurationSupported=0x1c5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0x3, ZoneIndices=([0]=0x3, [1]=0x3, [2]=0x3, [3]=0x3, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x0, Ipv4Metric=0x19, Ipv6Metric=0x19, Luid=0x6008002000000, Dhcpv4Server.lpSockaddr=0xdf9d10*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11e7933cfae992b0, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x23, [5]=0x7d, [6]=0xeb, [7]=0x9, [8]=0x7c, [9]=0x4a, [10]=0x82, [11]=0x56, [12]=0xb9, [13]=0x2b, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x57c4a82, FirstDnsSuffix=0x0), SizePointer=0xafe7f8*=0x818) returned 0x0
	[0141.847] LocalFree (hMem=0xdf9b98) returned 0x0
	[0141.924] WSAConnect (in: s=0x5a4, name=0x2a3ec28*(sa_family=2, sin_port=0x1bb, sin_addr="172.217.22.100"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0
	[0141.944] closesocket (s=0x57c) returned 0
	[0141.957] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe748 | out: phkResult=0xafe748*=0x57c) returned 0x0
	[0141.958] RegQueryValueExW (in: hKey=0x57c, lpValueName="HWRPortReuseOnSocketBind", lpReserved=0x0, lpType=0xafe764, lpData=0x0, lpcbData=0xafe760*=0x0 | out: lpType=0xafe764*=0x0, lpData=0x0, lpcbData=0xafe760*=0x0) returned 0x2
	[0141.959] RegCloseKey (hKey=0x57c) returned 0x0
	[0141.969] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe74c | out: phkResult=0xafe74c*=0x57c) returned 0x0
	[0141.970] RegQueryValueExW (in: hKey=0x57c, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0xafe768, lpData=0x0, lpcbData=0xafe764*=0x0 | out: lpType=0xafe768*=0x0, lpData=0x0, lpcbData=0xafe764*=0x0) returned 0x2
	[0141.970] RegCloseKey (hKey=0x57c) returned 0x0
	[0141.973] GetCurrentProcessId () returned 0x11b4
	[0141.976] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11b4) returned 0x57c
	[0142.073] EnumProcessModules (in: hProcess=0x57c, lphModule=0x2a411cc, cb=0x100, lpcbNeeded=0xafe754 | out: lphModule=0x2a411cc, lpcbNeeded=0xafe754) returned 1
	[0142.073] EnumProcessModules (in: hProcess=0x57c, lphModule=0x2a412d8, cb=0x200, lpcbNeeded=0xafe754 | out: lphModule=0x2a412d8, lpcbNeeded=0xafe754) returned 1
	[0142.074] GetModuleInformation (in: hProcess=0x57c, hModule=0x710000, lpmodinfo=0x2a41518, cb=0xc | out: lpmodinfo=0x2a41518*(lpBaseOfDll=0x710000, SizeOfImage=0x14000, EntryPoint=0x0)) returned 1
	[0142.074] CoTaskMemAlloc (cb=0x804) returned 0xdf9b98
	[0142.075] GetModuleBaseNameW (in: hProcess=0x57c, hModule=0x710000, lpBaseName=0xdf9b98, nSize=0x800 | out: lpBaseName="compito italiano.doc.exe") returned 0x18
	[0142.075] CoTaskMemFree (pv=0xdf9b98) 
	[0142.075] CoTaskMemAlloc (cb=0x804) returned 0xdf9b98
	[0142.075] GetModuleFileNameExW (in: hProcess=0x57c, hModule=0x710000, lpFilename=0xdf9b98, nSize=0x800 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\compito italiano.doc.exe")) returned 0x30
	[0142.076] CoTaskMemFree (pv=0xdf9b98) 
	[0142.076] CloseHandle (hObject=0x57c) returned 1
	[0142.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0142.080] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", lpFilePart=0x0) returned 0x30
	[0142.080] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.SchSendAuxRecord", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe74c | out: phkResult=0xafe74c*=0x0) returned 0x2
	[0142.082] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe74c | out: phkResult=0xafe74c*=0x57c) returned 0x0
	[0142.083] RegQueryValueExW (in: hKey=0x57c, lpValueName="SchSendAuxRecord", lpReserved=0x0, lpType=0xafe768, lpData=0x0, lpcbData=0xafe764*=0x0 | out: lpType=0xafe768*=0x0, lpData=0x0, lpcbData=0xafe764*=0x0) returned 0x2
	[0142.083] RegCloseKey (hKey=0x57c) returned 0x0
	[0142.084] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe74c | out: phkResult=0xafe74c*=0x57c) returned 0x0
	[0142.085] RegQueryValueExW (in: hKey=0x57c, lpValueName="SystemDefaultTlsVersions", lpReserved=0x0, lpType=0xafe768, lpData=0x0, lpcbData=0xafe764*=0x0 | out: lpType=0xafe768*=0x0, lpData=0x0, lpcbData=0xafe764*=0x0) returned 0x2
	[0142.085] RegCloseKey (hKey=0x57c) returned 0x0
	[0142.086] GetCurrentProcessId () returned 0x11b4
	[0142.086] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11b4) returned 0x57c
	[0142.086] EnumProcessModules (in: hProcess=0x57c, lphModule=0x2a44034, cb=0x100, lpcbNeeded=0xafe754 | out: lphModule=0x2a44034, lpcbNeeded=0xafe754) returned 1
	[0142.086] EnumProcessModules (in: hProcess=0x57c, lphModule=0x2a44140, cb=0x200, lpcbNeeded=0xafe754 | out: lphModule=0x2a44140, lpcbNeeded=0xafe754) returned 1
	[0142.086] GetModuleInformation (in: hProcess=0x57c, hModule=0x710000, lpmodinfo=0x2a44380, cb=0xc | out: lpmodinfo=0x2a44380*(lpBaseOfDll=0x710000, SizeOfImage=0x14000, EntryPoint=0x0)) returned 1
	[0142.086] CoTaskMemAlloc (cb=0x804) returned 0xdf9b98
	[0142.086] GetModuleBaseNameW (in: hProcess=0x57c, hModule=0x710000, lpBaseName=0xdf9b98, nSize=0x800 | out: lpBaseName="compito italiano.doc.exe") returned 0x18
	[0142.086] CoTaskMemFree (pv=0xdf9b98) 
	[0142.086] CoTaskMemAlloc (cb=0x804) returned 0xdf9b98
	[0142.086] GetModuleFileNameExW (in: hProcess=0x57c, hModule=0x710000, lpFilename=0xdf9b98, nSize=0x800 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\compito italiano.doc.exe")) returned 0x30
	[0142.087] CoTaskMemFree (pv=0xdf9b98) 
	[0142.087] CloseHandle (hObject=0x57c) returned 1
	[0142.087] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0142.087] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", lpFilePart=0x0) returned 0x30
	[0142.087] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.SystemDefaultTlsVersions", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe74c | out: phkResult=0xafe74c*=0x0) returned 0x2
	[0142.093] GetCurrentProcessId () returned 0x11b4
	[0142.094] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11b4) returned 0x57c
	[0142.094] EnumProcessModules (in: hProcess=0x57c, lphModule=0x2a46a50, cb=0x100, lpcbNeeded=0xafe74c | out: lphModule=0x2a46a50, lpcbNeeded=0xafe74c) returned 1
	[0142.094] EnumProcessModules (in: hProcess=0x57c, lphModule=0x2a46b5c, cb=0x200, lpcbNeeded=0xafe74c | out: lphModule=0x2a46b5c, lpcbNeeded=0xafe74c) returned 1
	[0142.094] GetModuleInformation (in: hProcess=0x57c, hModule=0x710000, lpmodinfo=0x2a46d9c, cb=0xc | out: lpmodinfo=0x2a46d9c*(lpBaseOfDll=0x710000, SizeOfImage=0x14000, EntryPoint=0x0)) returned 1
	[0142.094] CoTaskMemAlloc (cb=0x804) returned 0xdf9b98
	[0142.094] GetModuleBaseNameW (in: hProcess=0x57c, hModule=0x710000, lpBaseName=0xdf9b98, nSize=0x800 | out: lpBaseName="compito italiano.doc.exe") returned 0x18
	[0142.094] CoTaskMemFree (pv=0xdf9b98) 
	[0142.094] CoTaskMemAlloc (cb=0x804) returned 0xdf9b98
	[0142.094] GetModuleFileNameExW (in: hProcess=0x57c, hModule=0x710000, lpFilename=0xdf9b98, nSize=0x800 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\compito italiano.doc.exe")) returned 0x30
	[0142.095] CoTaskMemFree (pv=0xdf9b98) 
	[0142.095] CloseHandle (hObject=0x57c) returned 1
	[0142.095] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0142.095] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", lpFilePart=0x0) returned 0x30
	[0142.095] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.RequireCertificateEKUs", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe744 | out: phkResult=0xafe744*=0x0) returned 0x2
	[0142.096] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe744 | out: phkResult=0xafe744*=0x57c) returned 0x0
	[0142.097] RegQueryValueExW (in: hKey=0x57c, lpValueName="RequireCertificateEKUs", lpReserved=0x0, lpType=0xafe760, lpData=0x0, lpcbData=0xafe75c*=0x0 | out: lpType=0xafe760*=0x0, lpData=0x0, lpcbData=0xafe75c*=0x0) returned 0x2
	[0142.097] RegCloseKey (hKey=0x57c) returned 0x0
	[0142.099] GetCurrentProcessId () returned 0x11b4
	[0142.099] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11b4) returned 0x57c
	[0142.099] EnumProcessModules (in: hProcess=0x57c, lphModule=0x2a49600, cb=0x100, lpcbNeeded=0xafe750 | out: lphModule=0x2a49600, lpcbNeeded=0xafe750) returned 1
	[0142.099] EnumProcessModules (in: hProcess=0x57c, lphModule=0x2a4970c, cb=0x200, lpcbNeeded=0xafe750 | out: lphModule=0x2a4970c, lpcbNeeded=0xafe750) returned 1
	[0142.100] GetModuleInformation (in: hProcess=0x57c, hModule=0x710000, lpmodinfo=0x2a4994c, cb=0xc | out: lpmodinfo=0x2a4994c*(lpBaseOfDll=0x710000, SizeOfImage=0x14000, EntryPoint=0x0)) returned 1
	[0142.100] CoTaskMemAlloc (cb=0x804) returned 0xdf9b98
	[0142.100] GetModuleBaseNameW (in: hProcess=0x57c, hModule=0x710000, lpBaseName=0xdf9b98, nSize=0x800 | out: lpBaseName="compito italiano.doc.exe") returned 0x18
	[0142.100] CoTaskMemFree (pv=0xdf9b98) 
	[0142.100] CoTaskMemAlloc (cb=0x804) returned 0xdf9b98
	[0142.100] GetModuleFileNameExW (in: hProcess=0x57c, hModule=0x710000, lpFilename=0xdf9b98, nSize=0x800 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\compito italiano.doc.exe")) returned 0x30
	[0142.100] CoTaskMemFree (pv=0xdf9b98) 
	[0142.100] CloseHandle (hObject=0x57c) returned 1
	[0142.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0142.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", lpFilePart=0x0) returned 0x30
	[0142.101] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.SecurityProtocol", ulOptions=0x0, samDesired=0x20019, phkResult=0xafe748 | out: phkResult=0xafe748*=0x0) returned 0x2
	[0142.130] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0xdac920
	[0143.033] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0xdac920, dwGroupId=0x0) returned 0x0
	[0143.057] LocalFree (hMem=0xdac920) returned 0x0
	[0143.057] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0xdf9f88
	[0143.058] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0xdf9f88, dwGroupId=0x0) returned 0x0
	[0143.058] LocalFree (hMem=0xdf9f88) returned 0x0
	[0143.208] EnumerateSecurityPackagesW (in: pcPackages=0xafe788, ppPackageInfo=0xafe71c | out: pcPackages=0xafe788, ppPackageInfo=0xafe71c) returned 0x0
	[0143.270] FreeContextBuffer (in: pvContextBuffer=0xe097e0 | out: pvContextBuffer=0xe097e0) returned 0x0
	[0143.276] GetCurrentProcess () returned 0xffffffff
	[0143.276] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xafe54c | out: TokenHandle=0xafe54c*=0x5c8) returned 1
	[0143.277] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x2a4bd08, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0xafe5a0, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x2a4d4b4, ptsExpiry=0xafe524 | out: phCredential=0x2a4d4b4, ptsExpiry=0xafe524) returned 0x0
	[0144.477] InitializeSecurityContextW (in: phCredential=0xafe560, phContext=0x0, pTargetName=0x2a3ed1c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x2a4d6b8, pOutput=0x2a4d650, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe558 | out: phNewContext=0x2a4d6b8, pOutput=0x2a4d650, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe558) returned 0x90312
	[0144.502] FreeContextBuffer (in: pvContextBuffer=0xdfa480 | out: pvContextBuffer=0xdfa480) returned 0x0
	[0144.507] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0144.507] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="AppPolicyGetClrCompat", cchWideChar=21, lpMultiByteStr=0xafe5a0, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AppPolicyGetClrCompatãâq3lN£ðù°sèì¯", lpUsedDefaultChar=0x0) returned 21
	[0144.507] GetProcAddress (hModule=0x772d0000, lpProcName="AppPolicyGetClrCompat") returned 0x74c968b0
	[0144.510] AppPolicyGetClrCompat () returned 0x0
	[0144.512] send (s=0x5a4, buf=0x2a4d6cc*, len=174, flags=0) returned 174
	[0144.608] recv (in: s=0x5a4, buf=0x2a4d6cc, len=5, flags=0 | out: buf=0x2a4d6cc*) returned 5
	[0144.608] recv (in: s=0x5a4, buf=0x2a4d6d1, len=63, flags=0 | out: buf=0x2a4d6d1*) returned 63
	[0144.609] InitializeSecurityContextW (in: phCredential=0xafe4b8, phContext=0xafe548, pTargetName=0x2a3ed1c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2a4dad8, Reserved2=0x0, phNewContext=0x2a4d6b8, pOutput=0x2a4daec, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe4b0 | out: phNewContext=0x2a4d6b8, pOutput=0x2a4daec, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe4b0) returned 0x90312
	[0144.610] recv (in: s=0x5a4, buf=0x2a4db7c, len=5, flags=0 | out: buf=0x2a4db7c*) returned 5
	[0144.610] recv (in: s=0x5a4, buf=0x2a4db95, len=2334, flags=0 | out: buf=0x2a4db95*) returned 2334
	[0144.610] InitializeSecurityContextW (in: phCredential=0xafe414, phContext=0xafe4a4, pTargetName=0x2a3ed1c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2a4e524, Reserved2=0x0, phNewContext=0x2a4d6b8, pOutput=0x2a4e538, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe40c | out: phNewContext=0x2a4d6b8, pOutput=0x2a4e538, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe40c) returned 0x90312
	[0144.616] recv (in: s=0x5a4, buf=0x2a4e5c8, len=5, flags=0 | out: buf=0x2a4e5c8*) returned 5
	[0144.616] recv (in: s=0x5a4, buf=0x2a4e5e1, len=116, flags=0 | out: buf=0x2a4e5e1*) returned 116
	[0144.616] InitializeSecurityContextW (in: phCredential=0xafe370, phContext=0xafe400, pTargetName=0x2a3ed1c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2a4e6c8, Reserved2=0x0, phNewContext=0x2a4d6b8, pOutput=0x2a4e6dc, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe368 | out: phNewContext=0x2a4d6b8, pOutput=0x2a4e6dc, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe368) returned 0x90312
	[0144.617] recv (in: s=0x5a4, buf=0x2a4e76c, len=5, flags=0 | out: buf=0x2a4e76c*) returned 5
	[0144.617] recv (in: s=0x5a4, buf=0x2a4e785, len=4, flags=0 | out: buf=0x2a4e785*) returned 4
	[0144.617] InitializeSecurityContextW (in: phCredential=0xafe2cc, phContext=0xafe35c, pTargetName=0x2a3ed1c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2a4e7fc, Reserved2=0x0, phNewContext=0x2a4d6b8, pOutput=0x2a4e810, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe2c4 | out: phNewContext=0x2a4d6b8, pOutput=0x2a4e810, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe2c4) returned 0x90312
	[0144.670] FreeContextBuffer (in: pvContextBuffer=0xe0a698 | out: pvContextBuffer=0xe0a698) returned 0x0
	[0144.670] send (s=0x5a4, buf=0x2a4e88c*, len=93, flags=0) returned 93
	[0144.670] recv (in: s=0x5a4, buf=0x2a4e88c, len=5, flags=0 | out: buf=0x2a4e88c*) returned 5
	[0144.690] recv (in: s=0x5a4, buf=0x2a4e911, len=236, flags=0 | out: buf=0x2a4e911*) returned 236
	[0144.690] InitializeSecurityContextW (in: phCredential=0xafe228, phContext=0xafe2b8, pTargetName=0x2a3ed1c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2a4ea70, Reserved2=0x0, phNewContext=0x2a4d6b8, pOutput=0x2a4ea84, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe220 | out: phNewContext=0x2a4d6b8, pOutput=0x2a4ea84, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe220) returned 0x90312
	[0144.691] recv (in: s=0x5a4, buf=0x2a4eb14, len=5, flags=0 | out: buf=0x2a4eb14*) returned 5
	[0144.691] recv (in: s=0x5a4, buf=0x2a4eb2d, len=1, flags=0 | out: buf=0x2a4eb2d*) returned 1
	[0144.691] InitializeSecurityContextW (in: phCredential=0xafe184, phContext=0xafe214, pTargetName=0x2a3ed1c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2a4eba0, Reserved2=0x0, phNewContext=0x2a4d6b8, pOutput=0x2a4ebb4, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe17c | out: phNewContext=0x2a4d6b8, pOutput=0x2a4ebb4, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe17c) returned 0x90312
	[0144.691] recv (in: s=0x5a4, buf=0x2a4ec44, len=5, flags=0 | out: buf=0x2a4ec44*) returned 5
	[0144.691] recv (in: s=0x5a4, buf=0x2a4ec5d, len=40, flags=0 | out: buf=0x2a4ec5d*) returned 40
	[0144.692] InitializeSecurityContextW (in: phCredential=0xafe0e0, phContext=0xafe170, pTargetName=0x2a3ed1c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2a4ecf8, Reserved2=0x0, phNewContext=0x2a4d6b8, pOutput=0x2a4ed0c, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe0d8 | out: phNewContext=0x2a4d6b8, pOutput=0x2a4ed0c, pfContextAttr=0x2a4bcdc, ptsExpiry=0xafe0d8) returned 0x0
	[0146.124] QueryContextAttributesW (in: phContext=0x2a4d6b8, ulAttribute=0x4, pBuffer=0x2a4edb8 | out: pBuffer=0x2a4edb8) returned 0x0
	[0146.124] QueryContextAttributesW (in: phContext=0x2a4d6b8, ulAttribute=0x5a, pBuffer=0x2a4ee10 | out: pBuffer=0x2a4ee10) returned 0x0
	[0146.126] QueryContextAttributesW (in: phContext=0x2a4d6b8, ulAttribute=0x53, pBuffer=0x2a4eebc | out: pBuffer=0x2a4eebc) returned 0x0
	[0146.193] CertDuplicateCertificateContext (pCertContext=0xe08550) returned 0xe08550
	[0146.193] CertDuplicateStore (hCertStore=0xe0ac40) returned 0xe0ac40
	[0146.194] CertEnumCertificatesInStore (hCertStore=0xe0ac40, pPrevCertContext=0x0) returned 0xe085f0
	[0146.194] CertDuplicateCertificateContext (pCertContext=0xe085f0) returned 0xe085f0
	[0146.195] CertEnumCertificatesInStore (hCertStore=0xe0ac40, pPrevCertContext=0xe085f0) returned 0xe08550
	[0146.195] CertDuplicateCertificateContext (pCertContext=0xe08550) returned 0xe08550
	[0146.195] CertEnumCertificatesInStore (hCertStore=0xe0ac40, pPrevCertContext=0xe08550) returned 0x0
	[0146.195] CertCloseStore (hCertStore=0xe0ac40, dwFlags=0x0) returned 1
	[0146.195] CertFreeCertificateContext (pCertContext=0xe08550) returned 1
	[0146.223] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0xe0b3c0
	[0146.230] CertAddCRLLinkToStore (in: hCertStore=0xe0b3c0, pCrlContext=0xe085f0, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1
	[0146.232] CertAddCRLLinkToStore (in: hCertStore=0xe0b3c0, pCrlContext=0xe08550, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1
	[0146.233] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0xdded28
	[0146.258] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0xe08550, pTime=0xafe0f0, hAdditionalStore=0xe0b3c0, pChainPara=0xafe030, dwFlags=0x0, pvReserved=0x0, ppChainContext=0xafe024 | out: ppChainContext=0xafe024) returned 1
	[0146.364] LocalFree (hMem=0xdded28) returned 0x0
	[0146.365] CertDuplicateCertificateChain (pChainContext=0xe35590) returned 0xe35590
	[0146.366] CertDuplicateCertificateContext (pCertContext=0xe08550) returned 0xe08550
	[0146.366] CertDuplicateCertificateContext (pCertContext=0xe083c0) returned 0xe083c0
	[0146.366] CertDuplicateCertificateContext (pCertContext=0xe08690) returned 0xe08690
	[0146.366] CertFreeCertificateChain (pChainContext=0xe35590) 
	[0146.367] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0xe35590, pPolicyPara=0xafe1d0, pPolicyStatus=0xafe1bc | out: pPolicyStatus=0xafe1bc) returned 1
	[0146.371] SetLastError (dwErrCode=0x0) 
	[0146.445] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0xe35590, pPolicyPara=0xafe230, pPolicyStatus=0xafe1e4 | out: pPolicyStatus=0xafe1e4) returned 1
	[0146.463] CertFreeCertificateChain (pChainContext=0xe35590) 
	[0146.463] CertFreeCertificateContext (pCertContext=0xe08550) returned 1
	[0146.486] CoTaskMemAlloc (cb=0x20c) returned 0xe35590
	[0146.486] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0xe35590, nSize=0x104 | out: lpBuffer="샀ãꄸãĀ") returned 0x0
	[0146.486] CoTaskMemFree (pv=0xe35590) 
	[0146.486] CoTaskMemAlloc (cb=0x20c) returned 0xe35590
	[0146.486] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0xe35590, nSize=0x104 | out: lpBuffer="샀ãꄸãĀ") returned 0x0
	[0146.486] CoTaskMemFree (pv=0xe35590) 
	[0146.486] CoTaskMemAlloc (cb=0x20c) returned 0xe35590
	[0146.487] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0xe35590, nSize=0x104 | out: lpBuffer="샀ãꄸãĀ") returned 0x0
	[0146.487] CoTaskMemFree (pv=0xe35590) 
	[0146.487] CoTaskMemAlloc (cb=0x20c) returned 0xe35590
	[0146.487] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0xe35590, nSize=0x104 | out: lpBuffer="샀ãꄸãĀ") returned 0x0
	[0146.487] CoTaskMemFree (pv=0xe35590) 
	[0146.488] EncryptMessage (in: phContext=0x2a4d6b8, fQOP=0x0, pMessage=0x2a56fe0, MessageSeqNo=0x0 | out: pMessage=0x2a56fe0) returned 0x0
	[0146.488] send (s=0x5a4, buf=0x2a55ab8*, len=93, flags=0) returned 93
	[0146.490] setsockopt (s=0x5a4, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0
	[0146.491] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.556] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.556] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a673b0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a673b0, pfQOP=0x0) returned 0x0
	[0146.572] setsockopt (s=0x5a4, level=65535, optname=4102, optval="ô\x01", optlen=4) returned 0
	[0146.572] QueryPerformanceCounter (in: lpPerformanceCount=0xafead0 | out: lpPerformanceCount=0xafead0*=24095700100) returned 1
	[0146.572] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24095709633) returned 1
	[0146.580] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.581] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.581] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6afb0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6afb0, pfQOP=0x0) returned 0x0
	[0146.581] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24096601405) returned 1
	[0146.581] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.581] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.581] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6b0d0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6b0d0, pfQOP=0x0) returned 0x0
	[0146.581] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24096636393) returned 1
	[0146.581] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.582] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.582] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6b1f0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6b1f0, pfQOP=0x0) returned 0x0
	[0146.582] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24096671016) returned 1
	[0146.582] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.582] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.582] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6b310, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6b310, pfQOP=0x0) returned 0x0
	[0146.582] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24096704380) returned 1
	[0146.582] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.582] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.582] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6b430, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6b430, pfQOP=0x0) returned 0x0
	[0146.582] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24096983887) returned 1
	[0146.585] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.585] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.585] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6b550, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6b550, pfQOP=0x0) returned 0x0
	[0146.585] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097022479) returned 1
	[0146.585] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.585] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.585] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6b670, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6b670, pfQOP=0x0) returned 0x0
	[0146.586] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097060238) returned 1
	[0146.586] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.586] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.586] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6b790, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6b790, pfQOP=0x0) returned 0x0
	[0146.586] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097100394) returned 1
	[0146.586] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.586] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.586] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6b8b0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6b8b0, pfQOP=0x0) returned 0x0
	[0146.586] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097143130) returned 1
	[0146.587] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.587] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.587] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6b9d0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6b9d0, pfQOP=0x0) returned 0x0
	[0146.587] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097179940) returned 1
	[0146.587] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.587] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.587] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6baf0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6baf0, pfQOP=0x0) returned 0x0
	[0146.587] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097216500) returned 1
	[0146.587] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.587] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.587] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6bc10, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6bc10, pfQOP=0x0) returned 0x0
	[0146.588] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097251710) returned 1
	[0146.588] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.588] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.588] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6bd30, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6bd30, pfQOP=0x0) returned 0x0
	[0146.588] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097288297) returned 1
	[0146.588] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.588] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.588] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6be50, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6be50, pfQOP=0x0) returned 0x0
	[0146.588] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097330551) returned 1
	[0146.588] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.588] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.589] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6bf70, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6bf70, pfQOP=0x0) returned 0x0
	[0146.589] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097370051) returned 1
	[0146.589] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.589] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.589] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6c090, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6c090, pfQOP=0x0) returned 0x0
	[0146.589] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097407607) returned 1
	[0146.589] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.589] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.589] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6c1b0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6c1b0, pfQOP=0x0) returned 0x0
	[0146.589] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097442762) returned 1
	[0146.590] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.590] recv (in: s=0x5a4, buf=0x2a632f5, len=1088, flags=0 | out: buf=0x2a632f5*) returned 1088
	[0146.590] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6c2d0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6c2d0, pfQOP=0x0) returned 0x0
	[0146.590] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097487136) returned 1
	[0146.590] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.590] recv (in: s=0x5a4, buf=0x2a632f5, len=274, flags=0 | out: buf=0x2a632f5*) returned 274
	[0146.591] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6c3f0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6c3f0, pfQOP=0x0) returned 0x0
	[0146.591] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097576018) returned 1
	[0146.591] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.591] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.591] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6c510, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6c510, pfQOP=0x0) returned 0x0
	[0146.591] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097628240) returned 1
	[0146.591] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.591] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.592] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6c630, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6c630, pfQOP=0x0) returned 0x0
	[0146.592] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097670282) returned 1
	[0146.592] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.592] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.592] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6c750, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6c750, pfQOP=0x0) returned 0x0
	[0146.592] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097705376) returned 1
	[0146.592] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.592] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.592] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6c870, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6c870, pfQOP=0x0) returned 0x0
	[0146.592] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097742262) returned 1
	[0146.593] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.593] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.593] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6c990, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6c990, pfQOP=0x0) returned 0x0
	[0146.593] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097781765) returned 1
	[0146.593] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.593] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.593] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6cab0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6cab0, pfQOP=0x0) returned 0x0
	[0146.593] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097820589) returned 1
	[0146.593] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.593] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.593] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6cbd0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6cbd0, pfQOP=0x0) returned 0x0
	[0146.594] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097856188) returned 1
	[0146.594] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.594] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.594] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6ccf0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6ccf0, pfQOP=0x0) returned 0x0
	[0146.594] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097899946) returned 1
	[0146.594] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.594] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.594] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6ce10, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6ce10, pfQOP=0x0) returned 0x0
	[0146.594] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097939993) returned 1
	[0146.594] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.595] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.595] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6cf30, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6cf30, pfQOP=0x0) returned 0x0
	[0146.595] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24097976541) returned 1
	[0146.595] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.595] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.595] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6d050, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6d050, pfQOP=0x0) returned 0x0
	[0146.595] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24098010405) returned 1
	[0146.595] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.595] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.595] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6d170, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6d170, pfQOP=0x0) returned 0x0
	[0146.595] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24098046926) returned 1
	[0146.596] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.596] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.596] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6d290, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6d290, pfQOP=0x0) returned 0x0
	[0146.596] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24098083113) returned 1
	[0146.596] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.596] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.596] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6d3b0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6d3b0, pfQOP=0x0) returned 0x0
	[0146.596] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24098117958) returned 1
	[0146.596] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.596] recv (in: s=0x5a4, buf=0x2a632f5, len=1425, flags=0 | out: buf=0x2a632f5*) returned 1425
	[0146.596] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6d4d0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6d4d0, pfQOP=0x0) returned 0x0
	[0146.597] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24098152880) returned 1
	[0146.597] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.597] recv (in: s=0x5a4, buf=0x2a632f5, len=191, flags=0 | out: buf=0x2a632f5*) returned 191
	[0146.597] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6d5f0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6d5f0, pfQOP=0x0) returned 0x0
	[0146.597] QueryPerformanceCounter (in: lpPerformanceCount=0xafea98 | out: lpPerformanceCount=0xafea98*=24098185332) returned 1
	[0146.597] recv (in: s=0x5a4, buf=0x2a632f0, len=5, flags=0 | out: buf=0x2a632f0*) returned 5
	[0146.597] recv (in: s=0x5a4, buf=0x2a632f5, len=29, flags=0 | out: buf=0x2a632f5*) returned 29
	[0146.597] DecryptMessage (in: phContext=0x2a4d6b8, pMessage=0x2a6d710, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2a6d710, pfQOP=0x0) returned 0x0
	[0146.597] SetEvent (hEvent=0x2d8) returned 1
	[0146.597] QueryPerformanceCounter (in: lpPerformanceCount=0xafeabc | out: lpPerformanceCount=0xafeabc*=24098248305) returned 1
	[0146.605] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\ransom.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x15
	[0146.605] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\ransom.jpg", nBufferLength=0x15, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\ransom.jpg", lpFilePart=0x0) returned 0x14
	[0146.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafea60) returned 1
	[0146.605] CreateFileW (lpFileName="C:\\FD1HVy\\ransom.jpg" (normalized: "c:\\fd1hvy\\ransom.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6a4
	[0146.608] GetFileType (hFile=0x6a4) returned 0x1
	[0146.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafea5c) returned 1
	[0146.609] GetFileType (hFile=0x6a4) returned 0x1
	[0146.609] QueryPerformanceCounter (in: lpPerformanceCount=0xafeae4 | out: lpPerformanceCount=0xafeae4*=24099393967) returned 1
	[0146.609] SetEvent (hEvent=0x2d8) returned 1
	[0146.609] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe8ec*=0x49c, lpdwindex=0xafe70c | out: lpdwindex=0xafe70c) returned 0x80010115
	[0146.610] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302c8, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
	[0146.611] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
	[0146.612] NtdllDefWindowProc_W (hWnd=0x7002e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
	[0146.728] BeginPaint (in: hWnd=0x18001c, lpPaint=0xafe050 | out: lpPaint=0xafe050) returned 0xf0105ee
	[0146.729] GdipCreateHalftonePalette () returned 0x7108064d
	[0146.730] SelectPalette (hdc=0xf0105ee, hPal=0x7108064d, bForceBkgd=1) returned 0x88000b
	[0146.730] GetWindowTextLengthW (hWnd=0x18001c) returned 5
	[0146.731] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0146.731] GetSystemMetrics (nIndex=42) returned 0
	[0146.731] GetWindowTextW (in: hWnd=0x18001c, lpString=0xafdfec, nMaxCount=6 | out: lpString="Form1") returned 5
	[0146.731] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xd, wParam=0x6, lParam=0xafdfec) returned 0x5
	[0146.731] SelectPalette (hdc=0xf0105ee, hPal=0x88000b, bForceBkgd=0) returned 0x7108064d
	[0146.731] EndPaint (hWnd=0x18001c, lpPaint=0xafe04c) returned 1
	[0146.732] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe8cc*=0x48c, lpdwindex=0xafe6ec | out: lpdwindex=0xafe6ec) returned 0x80010115
	[0146.733] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe8cc*=0x494, lpdwindex=0xafe6ec | out: lpdwindex=0xafe6ec) returned 0x80010115
	[0146.733] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe920*=0x4bc, lpdwindex=0xafe73c | out: lpdwindex=0xafe73c) returned 0x80010115
	[0146.733] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe920*=0x4c4, lpdwindex=0xafe73c | out: lpdwindex=0xafe73c) returned 0x80010115
	[0146.734] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe920*=0x4cc, lpdwindex=0xafe73c | out: lpdwindex=0xafe73c) returned 0x80010115
	[0146.734] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6ac
	[0146.735] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6b0
	[0146.735] GetAddrInfoW (in: pNodeName="wannadie.altervista.org", pServiceName=0x0, pHints=0xafe820*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0xafe7c8 | out: ppResult=0xafe7c8*=0xe05b40*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="wannadie.altervista.org", ai_addr=0xe11fb8*(sa_family=2, sin_port=0x0, sin_addr="51.75.240.53"), ai_next=0x0)) returned 0
	[0146.740] FreeAddrInfoW (pAddrInfo=0xe05b40*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="wannadie.altervista.org", ai_addr=0xe11fb8*(sa_family=2, sin_port=0x0, sin_addr="51.75.240.53"), ai_next=0x0)) 
	[0146.740] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe764*=0x5b4, lpdwindex=0xafe584 | out: lpdwindex=0xafe584) returned 0x80010115
	[0146.741] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe764*=0x5bc, lpdwindex=0xafe584 | out: lpdwindex=0xafe584) returned 0x80010115
	[0146.741] WSAConnect (in: s=0x6ac, name=0x2a7f940*(sa_family=2, sin_port=0x50, sin_addr="51.75.240.53"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0
	[0146.780] closesocket (s=0x6b0) returned 0
	[0146.780] send (s=0x6ac, buf=0x2a3faf8*, len=82, flags=0) returned 82
	[0146.781] setsockopt (s=0x6ac, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0
	[0146.781] recv (in: s=0x6ac, buf=0x2a3a1e4, len=4096, flags=0 | out: buf=0x2a3a1e4*) returned 4096
	[0146.924] setsockopt (s=0x6ac, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0
	[0146.924] recv (in: s=0x6ac, buf=0x2a80398, len=65536, flags=0 | out: buf=0x2a80398*) returned 65536
	[0146.925] WriteFile (in: hFile=0x6a4, lpBuffer=0x2a903c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xafeaa4, lpOverlapped=0x0 | out: lpBuffer=0x2a903c8*, lpNumberOfBytesWritten=0xafeaa4*=0x1000, lpOverlapped=0x0) returned 1
	[0146.927] WriteFile (in: hFile=0x6a4, lpBuffer=0x2a804f7*, nNumberOfBytesToWrite=0xfea1, lpNumberOfBytesWritten=0xafeaa4, lpOverlapped=0x0 | out: lpBuffer=0x2a804f7*, lpNumberOfBytesWritten=0xafeaa4*=0xfea1, lpOverlapped=0x0) returned 1
	[0146.928] recv (in: s=0x6ac, buf=0x2a80398, len=65536, flags=0 | out: buf=0x2a80398*) returned 64688
	[0146.929] WriteFile (in: hFile=0x6a4, lpBuffer=0x2a80398*, nNumberOfBytesToWrite=0xfcb0, lpNumberOfBytesWritten=0xafeaa4, lpOverlapped=0x0 | out: lpBuffer=0x2a80398*, lpNumberOfBytesWritten=0xafeaa4*=0xfcb0, lpOverlapped=0x0) returned 1
	[0146.930] recv (in: s=0x6ac, buf=0x2a80398, len=65536, flags=0 | out: buf=0x2a80398*) returned 65536
	[0146.978] WriteFile (in: hFile=0x6a4, lpBuffer=0x2a80398*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0xafeaa4, lpOverlapped=0x0 | out: lpBuffer=0x2a80398*, lpNumberOfBytesWritten=0xafeaa4*=0x10000, lpOverlapped=0x0) returned 1
	[0146.979] recv (in: s=0x6ac, buf=0x2a80398, len=65536, flags=0 | out: buf=0x2a80398*) returned 57104
	[0146.980] WriteFile (in: hFile=0x6a4, lpBuffer=0x2a80398*, nNumberOfBytesToWrite=0xdf10, lpNumberOfBytesWritten=0xafeaa4, lpOverlapped=0x0 | out: lpBuffer=0x2a80398*, lpNumberOfBytesWritten=0xafeaa4*=0xdf10, lpOverlapped=0x0) returned 1
	[0146.981] recv (in: s=0x6ac, buf=0x2a80398, len=65536, flags=0 | out: buf=0x2a80398*) returned 8760
	[0147.002] WriteFile (in: hFile=0x6a4, lpBuffer=0x2a80398*, nNumberOfBytesToWrite=0x2238, lpNumberOfBytesWritten=0xafeaa4, lpOverlapped=0x0 | out: lpBuffer=0x2a80398*, lpNumberOfBytesWritten=0xafeaa4*=0x2238, lpOverlapped=0x0) returned 1
	[0147.004] recv (in: s=0x6ac, buf=0x2a80398, len=65536, flags=0 | out: buf=0x2a80398*) returned 55480
	[0147.004] WriteFile (in: hFile=0x6a4, lpBuffer=0x2a80398*, nNumberOfBytesToWrite=0xd8b8, lpNumberOfBytesWritten=0xafeaa4, lpOverlapped=0x0 | out: lpBuffer=0x2a80398*, lpNumberOfBytesWritten=0xafeaa4*=0xd8b8, lpOverlapped=0x0) returned 1
	[0147.005] recv (in: s=0x6ac, buf=0x2a80398, len=56069, flags=0 | out: buf=0x2a80398*) returned 8760
	[0147.037] WriteFile (in: hFile=0x6a4, lpBuffer=0x2a80398*, nNumberOfBytesToWrite=0x2238, lpNumberOfBytesWritten=0xafeaa4, lpOverlapped=0x0 | out: lpBuffer=0x2a80398*, lpNumberOfBytesWritten=0xafeaa4*=0x2238, lpOverlapped=0x0) returned 1
	[0147.037] recv (in: s=0x6ac, buf=0x2a80398, len=47309, flags=0 | out: buf=0x2a80398*) returned 45260
	[0147.037] WriteFile (in: hFile=0x6a4, lpBuffer=0x2a80398*, nNumberOfBytesToWrite=0xb0cc, lpNumberOfBytesWritten=0xafeaa4, lpOverlapped=0x0 | out: lpBuffer=0x2a80398*, lpNumberOfBytesWritten=0xafeaa4*=0xb0cc, lpOverlapped=0x0) returned 1
	[0147.038] recv (in: s=0x6ac, buf=0x2a80398, len=2049, flags=0 | out: buf=0x2a80398*) returned 2049
	[0147.050] WriteFile (in: hFile=0x6a4, lpBuffer=0x2a903c8*, nNumberOfBytesToWrite=0x801, lpNumberOfBytesWritten=0xafea84, lpOverlapped=0x0 | out: lpBuffer=0x2a903c8*, lpNumberOfBytesWritten=0xafea84*=0x801, lpOverlapped=0x0) returned 1
	[0147.050] CloseHandle (hObject=0x6a4) returned 1
	[0147.079] SystemParametersInfoW (in: uiAction=0x14, uiParam=0x0, pvParam="C:\\FD1HVy\\ransom.jpg" (normalized: "c:\\fd1hvy\\ransom.jpg"), fWinIni=0x3 | out: pvParam=0x2a22d78) returned 1
	[0147.383] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302c8, Msg=0x1a, wParam=0x14, lParam=0x7bcfa8) returned 0x0
	[0147.383] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x1a, wParam=0x14, lParam=0x7bcfa8) returned 0x0
	[0147.385] SystemParametersInfoW (in: uiAction=0x26, uiParam=0x0, pvParam=0xafe6d0, fWinIni=0x0 | out: pvParam=0xafe6d0) returned 1
	[0147.386] LocalAlloc (uFlags=0x0, uBytes=0x2) returned 0xda59c8
	[0147.387] PostMessageW (hWnd=0x7002e, Msg=0x201a, wParam=0x14, lParam=0xda59c8) returned 1
	[0147.387] NtdllDefWindowProc_W (hWnd=0x7002e, Msg=0x1a, wParam=0x14, lParam=0x7bcfa8) returned 0x0
	[0147.540] QueryPerformanceCounter (in: lpPerformanceCount=0xafeaa8 | out: lpPerformanceCount=0xafeaa8*=24192509467) returned 1
	[0147.540] SetEvent (hEvent=0x2d8) returned 1
	[0147.540] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe8b0*=0x49c, lpdwindex=0xafe6cc | out: lpdwindex=0xafe6cc) returned 0x80010115
	[0147.541] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe890*=0x48c, lpdwindex=0xafe6ac | out: lpdwindex=0xafe6ac) returned 0x80010115
	[0147.541] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe890*=0x494, lpdwindex=0xafe6ac | out: lpdwindex=0xafe6ac) returned 0x80010115
	[0147.542] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe8e4*=0x4bc, lpdwindex=0xafe704 | out: lpdwindex=0xafe704) returned 0x80010115
	[0147.542] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe8e4*=0x4c4, lpdwindex=0xafe704 | out: lpdwindex=0xafe704) returned 0x80010115
	[0147.543] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xafe8e4*=0x4cc, lpdwindex=0xafe704 | out: lpdwindex=0xafe704) returned 0x80010115
	[0147.545] select (in: nfds=0, readfds=0x2a92290, writefds=0x0, exceptfds=0x0, timeout=0xafe97c*(tv_sec=0, tv_usec=0) | out: readfds=0x2a92290, writefds=0x0, exceptfds=0x0) returned 0
	[0147.545] send (s=0x6ac, buf=0x2a3faf8*, len=133, flags=0) returned 133
	[0147.546] setsockopt (s=0x6ac, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0
	[0147.546] recv (in: s=0x6ac, buf=0x2a3a1e4, len=4096, flags=0 | out: buf=0x2a3a1e4*) returned 191
	[0148.978] setsockopt (s=0x6ac, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0
	[0148.979] recv (in: s=0x6ac, buf=0x2a3a1e4, len=12, flags=0 | out: buf=0x2a3a1e4*) returned 5
	[0149.000] GetWindowThreadProcessId (in: hWnd=0x18001c, lpdwProcessId=0xafebb0 | out: lpdwProcessId=0xafebb0) returned 0x11c4
	[0149.000] GetCurrentThreadId () returned 0x11c4
	[0149.001] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc1a2
	[0149.001] PostMessageW (hWnd=0x18001c, Msg=0xc1a2, wParam=0x0, lParam=0x0) returned 1
	[0149.002] GetWindowTextLengthW (hWnd=0x18001c) returned 5
	[0149.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0149.002] GetSystemMetrics (nIndex=42) returned 0
	[0149.002] GetWindowTextW (in: hWnd=0x18001c, lpString=0xafeb30, nMaxCount=6 | out: lpString="Form1") returned 5
	[0149.002] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xd, wParam=0x6, lParam=0xafeb30) returned 0x5
	[0149.009] OleInitialize (pvReserved=0x0) returned 0x0
	[0149.010] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0xaff0dc | out: lplpMessageFilter=0xaff0dc*=0x0) returned 0x0
	[0149.011] PeekMessageW (in: lpMsg=0xaff0b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xaff0b0) returned 1
	[0149.012] IsWindowUnicode (hWnd=0x18001c) returned 1
	[0149.012] GetMessageW (in: lpMsg=0xaff0b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xaff0b0) returned 1
	[0149.013] TranslateMessage (lpMsg=0xaff0b0) returned 0
	[0149.013] DispatchMessageW (lpMsg=0xaff0b0) returned 0x0
	[0149.014] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x46, wParam=0x0, lParam=0xafee04) returned 0x0
	[0149.014] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x83, wParam=0x1, lParam=0xafeddc) returned 0x0
	[0149.015] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
	[0149.017] GetWindowPlacement (in: hWnd=0x18001c, lpwndpl=0xafeb4c | out: lpwndpl=0xafeb4c) returned 1
	[0149.017] GetClientRect (in: hWnd=0x18001c, lpRect=0xafeaf8 | out: lpRect=0xafeaf8) returned 1
	[0149.017] GetWindowTextLengthW (hWnd=0x18001c) returned 5
	[0149.017] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0149.017] GetSystemMetrics (nIndex=42) returned 0
	[0149.017] GetWindowTextW (in: hWnd=0x18001c, lpString=0xafe9c4, nMaxCount=6 | out: lpString="Form1") returned 5
	[0149.017] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xd, wParam=0x6, lParam=0xafe9c4) returned 0x5
	[0149.018] GetClientRect (in: hWnd=0x18001c, lpRect=0xafea00 | out: lpRect=0xafea00) returned 1
	[0149.018] GetCurrentObject (hdc=0xf0105ee, type=0x1) returned 0xb00017
	[0149.018] GetCurrentObject (hdc=0xf0105ee, type=0x2) returned 0x900010
	[0149.018] GetCurrentObject (hdc=0xf0105ee, type=0x7) returned 0x110507b6
	[0149.018] GetCurrentObject (hdc=0xf0105ee, type=0x6) returned 0x8a01c2
	[0149.018] SaveDC (hdc=0xf0105ee) returned 1
	[0149.018] GetNearestColor (hdc=0xf0105ee, color=0xf0f0f0) returned 0xf0f0f0
	[0149.018] CreateSolidBrush (color=0xf0f0f0) returned 0x45100197
	[0149.018] FillRect (hDC=0xf0105ee, lprc=0xafe8a0, hbr=0x45100197) returned 1
	[0149.019] DeleteObject (ho=0x45100197) returned 1
	[0149.019] RestoreDC (hdc=0xf0105ee, nSavedDC=-1) returned 1
	[0149.019] GetWindowPlacement (in: hWnd=0x18001c, lpwndpl=0xafeb30 | out: lpwndpl=0xafeb30) returned 1
	[0149.019] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x47, wParam=0x0, lParam=0xafee04) returned 0x0
	[0149.020] GetClientRect (in: hWnd=0x18001c, lpRect=0xafeae0 | out: lpRect=0xafeae0) returned 1
	[0149.020] GetWindowRect (in: hWnd=0x18001c, lpRect=0xafeae0 | out: lpRect=0xafeae0) returned 1
	[0149.021] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x83, wParam=0x1, lParam=0xafe91c) returned 0x0
	[0149.022] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
	[0149.023] GetWindowPlacement (in: hWnd=0x18001c, lpwndpl=0xafe68c | out: lpwndpl=0xafe68c) returned 1
	[0149.023] GetClientRect (in: hWnd=0x18001c, lpRect=0xafe638 | out: lpRect=0xafe638) returned 1
	[0149.023] GetWindowTextLengthW (hWnd=0x18001c) returned 5
	[0149.023] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5
	[0149.023] GetSystemMetrics (nIndex=42) returned 0
	[0149.023] GetWindowTextW (in: hWnd=0x18001c, lpString=0xafe504, nMaxCount=6 | out: lpString="Form1") returned 5
	[0149.023] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0xd, wParam=0x6, lParam=0xafe504) returned 0x5
	[0149.023] GetClientRect (in: hWnd=0x18001c, lpRect=0xafe540 | out: lpRect=0xafe540) returned 1
	[0149.023] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017
	[0149.023] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010
	[0149.023] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x110507b6
	[0149.023] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2
	[0149.023] SaveDC (hdc=0x10105d6) returned 1
	[0149.023] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0
	[0149.024] CreateSolidBrush (color=0xf0f0f0) returned 0x46100197
	[0149.024] FillRect (hDC=0x10105d6, lprc=0xafe3e0, hbr=0x46100197) returned 1
	[0149.024] DeleteObject (ho=0x46100197) returned 1
	[0149.024] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1
	[0149.024] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
	[0149.025] PeekMessageW (in: lpMsg=0xaff0b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xaff0b0) returned 1
	[0149.025] IsWindowUnicode (hWnd=0x302c8) returned 1
	[0149.025] GetMessageW (in: lpMsg=0xaff0b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xaff0b0) returned 1
	[0149.025] TranslateMessage (lpMsg=0xaff0b0) returned 0
	[0149.025] DispatchMessageW (lpMsg=0xaff0b0) returned 0x0
	[0149.025] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302c8, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
	[0149.025] PeekMessageW (in: lpMsg=0xaff0b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xaff0b0) returned 1
	[0149.025] IsWindowUnicode (hWnd=0x7002e) returned 1
	[0149.025] GetMessageW (in: lpMsg=0xaff0b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xaff0b0) returned 1
	[0149.025] TranslateMessage (lpMsg=0xaff0b0) returned 0
	[0149.025] DispatchMessageW (lpMsg=0xaff0b0) returned 0x0
	[0149.044] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0149.044] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", lpFilePart=0x0) returned 0x30
	[0149.045] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0149.045] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", lpFilePart=0x0) returned 0x30
	[0149.045] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0149.045] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", lpFilePart=0x0) returned 0x30
	[0149.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xafebe4) returned 1
	[0149.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\compito italiano.doc.exe"), fInfoLevelId=0x0, lpFileInformation=0xafec60 | out: lpFileInformation=0xafec60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0149.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xafebe0) returned 1
	[0149.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0149.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", lpFilePart=0x0) returned 0x30
	[0149.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31
	[0149.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", nBufferLength=0x31, lpBuffer=0xd99a20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\compito italiano.doc.exe", lpFilePart=0x0) returned 0x30
	[0149.066] GetWindowThreadProcessId (in: hWnd=0x8005c, lpdwProcessId=0xafecdc | out: lpdwProcessId=0xafecdc) returned 0x11c4
	[0149.066] GetCurrentThreadId () returned 0x11c4
	[0149.076] GetWindowThreadProcessId (in: hWnd=0x8005c, lpdwProcessId=0xafecdc | out: lpdwProcessId=0xafecdc) returned 0x11c4
	[0149.076] GetCurrentThreadId () returned 0x11c4
	[0149.078] LocalFree (hMem=0xda59c8) returned 0x0
	[0149.078] NtdllDefWindowProc_W (hWnd=0x7002e, Msg=0x201a, wParam=0x14, lParam=0xda59c8) returned 0x0
	[0149.078] PeekMessageW (in: lpMsg=0xaff0b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xaff0b0) returned 1
	[0149.078] GetMessageA (in: lpMsg=0xaff0b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xaff0b0) returned 0
	[0149.084] DestroyCursor (hCursor=0xa01f1) returned 1
	[0149.087] GetWindowLongW (hWnd=0x18001c, nIndex=-20) returned 590208
	[0149.087] DestroyWindow (hWnd=0x18001c) returned 1
	[0149.087] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
	[0149.087] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x46, wParam=0x0, lParam=0xafee64) returned 0x0
	[0149.090] GetWindowPlacement (in: hWnd=0x18001c, lpwndpl=0xafeb90 | out: lpwndpl=0xafeb90) returned 1
	[0149.090] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x47, wParam=0x0, lParam=0xafee64) returned 0x0
	[0149.091] GetClientRect (in: hWnd=0x18001c, lpRect=0xafeb40 | out: lpRect=0xafeb40) returned 1
	[0149.091] GetWindowRect (in: hWnd=0x18001c, lpRect=0xafeb40 | out: lpRect=0xafeb40) returned 1
	[0149.091] PostThreadMessageW (idThread=0x11c4, Msg=0x12, wParam=0x0, lParam=0x0) returned 1
	[0149.091] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
	[0149.092] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x18001c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
	[0149.092] DestroyWindow (hWnd=0x302c8) returned 1
	[0149.092] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302c8, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0
	[0149.093] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302c8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0
	[0149.093] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302c8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0
	[0149.103] GetCurrentThreadId () returned 0x11c4
	[0149.103] EnumThreadWindows (dwThreadId=0x11c4, lpfn=0x4e006d6, lParam=0x0) returned 1
	[0149.104] IsWindowVisible (hWnd=0x7002e) returned 0
	[0149.104] IsWindowVisible (hWnd=0x602c0) returned 0
	[0149.104] GetCurrentThreadId () returned 0x11c4
	[0149.105] GetCurrentThreadId () returned 0x11c4
	[0149.105] EnumThreadWindows (dwThreadId=0x11c4, lpfn=0x4e004f6, lParam=0x0) returned 1
	[0149.105] IsWindowVisible (hWnd=0x7002e) returned 0
	[0149.105] IsWindowVisible (hWnd=0x602c0) returned 0
	[0149.110] OleUninitialize () 
	[0149.111] CloseHandle (hObject=0x2f8) returned 1
	[0149.111] DeactivateActCtx (dwFlags=0x0, ulCookie=0x13c30002) returned 1
	[0149.112] CoGetContextToken (in: pToken=0xaffa58 | out: pToken=0xaffa58) returned 0x0
	[0149.112] CObjectContext::QueryInterface () returned 0x0
	[0149.112] CObjectContext::GetCurrentThreadType () returned 0x0
	[0149.112] Release () returned 0x0
	[0149.113] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0xd5bda0*=0x198, lpdwindex=0xaff8fc | out: lpdwindex=0xaff8fc) returned 0x0

Thread:
	id = 2
	os_tid = 0x11a0


Thread:
	id = 3
	os_tid = 0x11f0


Thread:
	id = 4
	os_tid = 0x53c

	[0096.290] CoGetContextToken (in: pToken=0x4a6f9a4 | out: pToken=0x4a6f9a4) returned 0x800401f0
	[0096.291] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0096.291] RoInitialize () returned 0x1
	[0096.291] RoUninitialize () returned 0x0
	[0118.005] CloseHandle (hObject=0x2e4) returned 1
	[0118.006] CloseHandle (hObject=0x2e0) returned 1
	[0118.006] CloseHandle (hObject=0x2dc) returned 1
	[0118.007] CloseHandle (hObject=0x2d8) returned 1
	[0118.007] CloseHandle (hObject=0x2f0) returned 1
	[0118.007] CloseHandle (hObject=0x2d4) returned 1
	[0118.007] CloseHandle (hObject=0x2d0) returned 1
	[0118.008] CloseHandle (hObject=0x2ec) returned 1
	[0118.008] CloseHandle (hObject=0x2e8) returned 1
	[0118.008] CloseHandle (hObject=0x2cc) returned 1
	[0149.167] SetWindowLongW (hWnd=0x8005c, nIndex=-4, dwNewLong=1950089536) returned 81790478
	[0149.169] SetClassLongW (hWnd=0x8005c, nIndex=-24, dwNewLong=1950089536) returned 0x4e005e6
	[0149.169] PostMessageW (hWnd=0x8005c, Msg=0x10, wParam=0x0, lParam=0x0) returned 1
	[0149.170] GetModuleHandleW (lpModuleName=0x0) returned 0x710000
	[0149.171] UnregisterClassW (lpClassName="WindowsForms10.Window.0.app.0.141b42a_r9_ad1", hInstance=0x710000) returned 1
	[0149.171] GetModuleHandleW (lpModuleName=0x0) returned 0x710000
	[0149.171] UnregisterClassW (lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", hInstance=0x710000) returned 0
	[0149.174] IsWindow (hWnd=0x7002e) returned 1
	[0149.175] GetModuleHandleW (lpModuleName="user32.dll") returned 0x750c0000
	[0149.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x4a6f744, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcWâq3lN£ðù°sÈù¦\x04\x01", lpUsedDefaultChar=0x0) returned 14
	[0149.175] GetProcAddress (hModule=0x750c0000, lpProcName="DefWindowProcW") returned 0x743c0140
	[0149.176] SetWindowLongW (hWnd=0x7002e, nIndex=-4, dwNewLong=1950089536) returned 81790598
	[0149.176] SetClassLongW (hWnd=0x7002e, nIndex=-24, dwNewLong=1950089536) returned 0x4e00686
	[0149.176] IsWindow (hWnd=0x7002e) returned 1
	[0149.176] DestroyWindow (hWnd=0x7002e) returned 0
	[0149.176] PostMessageW (hWnd=0x7002e, Msg=0x10, wParam=0x0, lParam=0x0) returned 1
	[0149.177] SetConsoleCtrlHandler (HandlerRoutine=0x4e0065e, Add=0) returned 1
	[0149.177] EtwEventUnregister (RegHandle=0xdbf700) returned 0x0
	[0149.177] EtwEventUnregister (RegHandle=0xdc0b40) returned 0x0
	[0149.178] DeleteObject (ho=0x7108064d) returned 1
	[0149.198] DeleteObject (ho=0x450a07a2) returned 1
	[0149.199] DestroyCursor (hCursor=0x902ab) returned 1
	[0149.199] GdipDeleteFont (font=0x4dfef48) returned 0x0
	[0149.202] setsockopt (s=0x6ac, level=65535, optname=128, optval="\x01", optlen=4) returned 0
	[0149.203] closesocket (s=0x6ac) returned 0
	[0149.206] setsockopt (s=0x5b8, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0149.206] closesocket (s=0x5b8) returned 0
	[0149.207] CloseHandle (hObject=0x5bc) returned 1
	[0149.207] setsockopt (s=0x5ac, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0149.207] closesocket (s=0x5ac) returned 0
	[0149.208] CloseHandle (hObject=0x5b4) returned 1
	[0149.209] setsockopt (s=0x5a4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
	[0149.209] closesocket (s=0x5a4) returned 0
	[0149.210] CertFreeCertificateContext (pCertContext=0xe08690) returned 1
	[0149.210] CertFreeCertificateContext (pCertContext=0xe083c0) returned 1
	[0149.211] CloseHandle (hObject=0x55c) returned 1
	[0149.211] CloseHandle (hObject=0x558) returned 1
	[0149.212] CloseHandle (hObject=0x51c) returned 1
	[0149.212] CloseHandle (hObject=0x518) returned 1
	[0149.213] CertFreeCertificateContext (pCertContext=0xe08550) returned 1
	[0149.213] WinHttpCloseHandle (hInternet=0xde0870) returned 1
	[0149.214] CloseHandle (hObject=0x4d0) returned 1
	[0149.215] CloseHandle (hObject=0x4cc) returned 1
	[0149.216] RegCloseKey (hKey=0x4c8) returned 0x0
	[0149.216] CloseHandle (hObject=0x4c4) returned 1
	[0149.216] RegCloseKey (hKey=0x4c0) returned 0x0
	[0149.217] CloseHandle (hObject=0x4bc) returned 1
	[0149.217] RegCloseKey (hKey=0x4b8) returned 0x0
	[0149.217] RegCloseKey (hKey=0x4b4) returned 0x0
	[0149.218] CloseHandle (hObject=0x49c) returned 1
	[0149.218] setsockopt (s=0x490, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0149.218] closesocket (s=0x490) returned 0
	[0149.219] CloseHandle (hObject=0x494) returned 1
	[0149.219] setsockopt (s=0x488, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0149.219] closesocket (s=0x488) returned 0
	[0149.220] CloseHandle (hObject=0x48c) returned 1
	[0149.220] CloseHandle (hObject=0x420) returned 1
	[0149.221] CloseHandle (hObject=0x41c) returned 1
	[0149.221] CloseHandle (hObject=0x418) returned 1
	[0149.221] CloseHandle (hObject=0x414) returned 1
	[0149.222] CloseHandle (hObject=0x404) returned 1
	[0149.222] CloseHandle (hObject=0x2e4) returned 1
	[0149.222] CloseHandle (hObject=0x2e0) returned 1
	[0149.223] CloseHandle (hObject=0x2f0) returned 1
	[0149.223] CloseHandle (hObject=0x2d4) returned 1
	[0149.223] CertCloseStore (hCertStore=0xe0b3c0, dwFlags=0x0) returned 1
	[0149.224] CertFreeCertificateContext (pCertContext=0xe08550) returned 1
	[0149.224] CloseHandle (hObject=0x2d0) returned 1
	[0149.225] UnmapViewOfFile (lpBaseAddress=0x7d60000) returned 1
	[0149.225] CertFreeCertificateContext (pCertContext=0xe085f0) returned 1
	[0149.242] FreeCredentialsHandle (phCredential=0x2a4d4b4) returned 0x0
	[0149.243] DeleteSecurityContext (phContext=0x2a4d6b8) returned 0x0
	[0149.244] RegCloseKey (hKey=0x80000004) returned 0x0
	[0149.245] CloseHandle (hObject=0x5c8) returned 1
	[0149.247] LocalFree (hMem=0xd99a20) returned 0x0
	[0149.251] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) 

Thread:
	id = 5
	os_tid = 0x1278


Thread:
	id = 6
	os_tid = 0x1310


Thread:
	id = 7
	os_tid = 0x1280


Thread:
	id = 8
	os_tid = 0x10bc


Thread:
	id = 9
	os_tid = 0x10ac


Thread:
	id = 10
	os_tid = 0xfb0

	[0137.920] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0137.920] RoInitialize () returned 0x1
	[0137.920] RoUninitialize () returned 0x0
	[0137.924] ResetEvent (hEvent=0x2d8) returned 1

Thread:
	id = 11
	os_tid = 0xfcc


Thread:
	id = 12
	os_tid = 0xafc


Thread:
	id = 13
	os_tid = 0x24c

	[0149.254] SleepEx (dwMilliseconds=0x14, bAlertable=0)